Hello,
Supposing you have a Search Head in Cloud, doing Federated Searches to other Search Heads on-prem, which is the compression ratio (if any)?
I have found those useful information about compression between forwarders and Indexers, but not between Search Heads.
Splunk Cloud Platform Service Details - Splunk Documentation
Thanks a lot,
Edoardo
Compression between Federated Search client and provider is handled by SSL/TLS.
Yes I know 🙂
Can we assume the same compression ratio? Or is there any official feedback on that somewhere in the docs?
I'm not aware of any Splunk documentation on the matter.