Configuring federated search
Hybrid search allows us to search Splunk Cloud from an on-premises (Splunk Enterprise) search head. Without hybrid search, it is not possible to integrate the two technologies. Federated search builds on this concept to allow us to search across different types of remote Splunk platforms. Federated search allows us to use our search head to search datasets across multiple Splunk deployments, regardless of topology. Suppose our company has a Splunk deployment in location X, another Splunk Enterprise deployment in location Y, and a Splunk Cloud deployment, where each deployment contains high-value datasets. Federated search allows us to use a search head at location X to search the deployment at location Y and the Splunk Cloud deployment. In addition, federated search allows us to search from the Splunk Cloud instance to the Splunk Enterprise deployment at location X and location Y. Hybrid search allows us to search in Splunk Cloud from Splunk Enterprise...