Search and Federated Search compression ratio

[edoardo_vicendo]

Hello,

Supposing you have a Search Head in Cloud, doing Federated Searches to other Search Heads on-prem, which is the compression ratio (if any)?

I have found those useful information about compression between forwarders and Indexers, but not between Search Heads.

https://community.splunk.com/t5/Getting-Data-In/What-kind-of-compression-is-used-between-forwarders-...

https://community.splunk.com/t5/Getting-Data-In/Forwarder-Output-Compression-Ratio-what-is-the-expec...

Splunk Cloud Platform Service Details - Splunk Documentation

Thanks a lot,

Edoardo

[richgalloway]

Compression between Federated Search client and provider is handled by SSL/TLS.

[edoardo_vicendo]

Yes I know 🙂

Can we assume the same compression ratio? Or is there any official feedback on that somewhere in the docs?

[richgalloway]

I'm not aware of any Splunk documentation on the matter.