Deployment Architecture

Search and Federated Search compression ratio

edoardo_vicendo
Contributor

Hello,

Supposing you have a Search Head in Cloud, doing Federated Searches to other Search Heads on-prem, which is the compression ratio (if any)?

I have found those useful information about compression between forwarders and Indexers, but not between Search Heads.

 

https://community.splunk.com/t5/Getting-Data-In/What-kind-of-compression-is-used-between-forwarders-...

https://community.splunk.com/t5/Getting-Data-In/Forwarder-Output-Compression-Ratio-what-is-the-expec...

Splunk Cloud Platform Service Details - Splunk Documentation

 

Thanks a lot,

Edoardo

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Compression between Federated Search client and provider is handled by SSL/TLS.

---
If this reply helps you, Karma would be appreciated.

edoardo_vicendo
Contributor

Yes I know 🙂

Can we assume the same compression ratio? Or is there any official feedback on that somewhere in the docs?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

I'm not aware of any Splunk documentation on the matter.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...

Federated Search for Amazon S3 | Key Use Cases to Streamline Compliance Workflows

Modern business operations are supported by data compliance. As regulations evolve, organizations must ...