federated provider

federated provider


A remote source of data that you search with federated searches. Federated providers can be Splunk Enterprise deployments or Splunk Cloud Platform environments. A single federated search can cover multiple federated providers.

Federated providers are governed by federated provider definitions, which you create and manage in Splunk Web.

For more information

In the Search Manual: