thi isn't a question for Community, it requires a Splunk Architect or a Propfessional Service!
also because it's hard to give you an answer without analyzing your worldwide architecture:
are the two Splunk instances connected?
are they a multisite cluster?
do you need an on-line alignment?
as you can suppose there are many variables.