UTStream is packaded as a
.tgz file containing all required files and libraries. There are no external dependencies. See Compatibility for tested Splunk and Cribl Stream versions.
Single Search Head Environment
UTStream only needs to be installed on a Search Head in case of an All-in-One installation or a distributed environment with a single Search Head. To install UTStream either follow the GUI based approach described in the Splunk Docs or leverage the CLI and install UTStream by running the following command:
./bin/splunk install app <path-to-spl>
Search Head Cluster
No special precautions have to be made for an installation in a Search Head Cluster. Please follow the process described in Splunk Docs to install UTStream.