federated search

federated search


A search from a Splunk platform deployment that returns data from one or more remote federated providers. This data can be combined with data from the Splunk platform deployment that runs the federated search.

Federated search is an improvement upon hybrid search, which enables searches that combine data from a Splunk Enterprise deployment and only one Splunk Cloud Platform environment.

For more information

In the Federated Search Manual: