federated search head

federated search head

noun

A search head residing on a local Splunk platform deployment that initiates federated searches. Contains federated indexes.

In this case, "local" means "the deployment from which you are initiating a federated search", as opposed to the remote federated providers that you search with federated searches.

For more information

In the Search Manual:

• About federated search
• Define a federated provider
• Create a federated index