I am building a distributed environment with search head clustering. I want to use the **Splunk App for Windows Infrastructure**. One of the requirements is the **SA-LDAPSearch** (a.k.a. **Splunk Support for Active Directory**). SA-LDAPSearch is not supported "for operation in an environment that has search head pooling or search head clustering enabled".
If so, does this mean that the **Splunk App for Windows Infrastructure** is not supported in environments with search head clusters? Does anyone have this running?
↧