Security

Federated search head validation

ssuluguri
Path Finder

Hi Team,

I have created a federated provider and test connection successful .

what will be our next steps ?

is federated index mandatory to create ? if yes all the indexes across SHs should be created ?'

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Transparent Mode does not use federated indexes so there's no need to create them.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

We  need more information.  Next steps to accomplish what?  What are you trying to do with FS?  Are you planning to use Standard mode or Transparent mode?

---
If this reply helps you, Karma would be appreciated.

ssuluguri
Path Finder

Transparent Mode .

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Transparent Mode does not use federated indexes so there's no need to create them.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Cloud Platform & Enterprise: Classic Dashboard Export Feature Deprecation

As of Splunk Cloud Platform 9.3.2408 and Splunk Enterprise 9.4, classic dashboard export features are now ...

Explore the Latest Educational Offerings from Splunk (November Releases)

At Splunk Education, we are committed to providing a robust learning experience for all users, regardless of ...

New This Month in Splunk Observability Cloud - Metrics Usage Analytics, Enhanced K8s ...

The latest enhancements across the Splunk Observability portfolio deliver greater flexibility, better data and ...