Distributed Search - Splunk Community

Getting Data In

Looking for answers on the following (with regards to the distributed search):

1.) An explanation on how the distributed search works.

2.) Explanation on roles of the Search Head and Search Peers (as it pertains to the distributed search).

3.) How to configure a distributed search group

4.) How to list search head scaling options.

Thank you in advance.

-KB

All of that is well documented at docs.splunk.com

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...