federated search

federated search


A search that combines data from a local Splunk platform deployment and data from one or more remote federated providers.

Federated search is an improvement upon hybrid search, which enables searches that combine data from a Splunk Enterprise deployment and only one Splunk Cloud Platform environment.

For more information

In the Search Manual: