Is there any way we can inject data to one running Splunk enterprise(on premise) to another through search API? I can find the configured search APIs for Splunk (https://docs.splunk.com/Documentation/Splunk/8.1.2/RESTTUT/RESTsearches) , But searching for a way to inject data through these endpoints without using forwarder .Is this possible?
Could you provide more details on what type of data you're transferring from one Splunk instance to another and reason behind it?
@somesoni2 since the documentation provided a way for getting log files data through REST , I was wondering is there any REST API configuration available in Splunk enterprise for receiving the search data from another running instance of it.
You could try the receivers/simple endpoint but I haven't used it myself so can't tell you whether it's a good idea. I mostly use HEC.