First I am trying to find this Splunk Whitepaper on MSaaS which is currently a dead link on this page describing MSaaS conceptual Architecture.
I would also appreciate ideas and architectures for supporting a Splunk platform that essentially is multi tenant. Thoughts on multiple instances vs creating and separating by index are good too. I'm just trying to identify methods, and weigh options at this point.
Thanks