Install the Splunk Add-on for Cisco Meraki¶
Use the tables below to determine where and how to install this add-on in a distributed deployment of Splunk Enterprise. See the installation walkthrough section at the bottom of this page for links to installation instructions specific to a single-instance deployment, distributed deployment, or Splunk Cloud.
Distributed installation of this add-on¶
This table provides a quick reference for installing this add-on to a distributed deployment of Splunk Enterprise.
Splunk instance type | Supported | Required | Comments |
---|---|---|---|
Search Heads | Yes | Yes | Install this add-on to all search heads where Cisco Meraki knowledge management is required. |
Indexers | Yes | No | Not required, because the parsing operations occur on the heavy forwarders. |
Heavy Forwarders | Yes | Yes | Install this add-on on heavy forwarders to perform data collection via modular inputs. |
Universal Forwarders | No | No | Install this add-on on a heavy forwarder for data collection. |
Inputs Data Manager | Yes | No | This add-on is supported by Splunk Inputs Data Manager (IDM) |
Self Service App Install (SSAI) | Conditional | No | This add-on is supported by Self Service App Install (SSAI). This add-on is not supported by Self Service App Install (SSAI) if an IDM is utilized. |
Distributed deployment compatibility¶
This table provides a quick reference for the compatibility of this add-on with Splunk distributed deployment features.
Distributed deployment feature |
Supported |
Comments |
---|---|---|
Search Head Clusters |
Yes |
You can install this add-on on a search head cluster for all search-time functionality, but configure inputs on forwarders to avoid duplicate data collection. |
Indexer Clusters |
Yes |
|
Deployment Server |
No |
Supported for deploying unconfigured add-on only.
|
Installation walkthrough¶
See “Installing add-ons” in Splunk Add-Ons for detailed instructions describing how to install a Splunk add-on in the following deployment scenarios: