Search and Federated Search compression ratio

edoardo_vicendo · ‎11-08-2023

Hello,

Supposing you have a Search Head in Cloud, doing Federated Searches to other Search Heads on-prem, which is the compression ratio (if any)?

I have found those useful information about compression between forwarders and Indexers, but not between Search Heads.

Thanks a lot,

Edoardo

richgalloway · ‎11-09-2023

Compression between Federated Search client and provider is handled by SSL/TLS.

---
If this reply helps you, Karma would be appreciated.

edoardo_vicendo · ‎11-14-2023

Yes I know 🙂

Can we assume the same compression ratio? Or is there any official feedback on that somewhere in the docs?

richgalloway · ‎11-14-2023

I'm not aware of any Splunk documentation on the matter.

---
If this reply helps you, Karma would be appreciated.

Are you a member of the Splunk Community?