federated search

federated search

noun

A search from a Splunk platform deployment that returns data from one or more remote federated providers. This data can be combined with data from the Splunk platform deployment that runs the federated search.

Federated search is an improvement upon hybrid search, which enables searches that combine data from a Splunk Enterprise deployment and only one Splunk Cloud Platform environment.

For more information

In the Federated Search Manual:

• About Federated Search for Splunk
• Run federated searches over remote Splunk platform deployments
• About Federated Search for Amazon S3