Security

Federated search head validation

ssuluguri
Path Finder

Hi Team,

I have created a federated provider and test connection successful .

what will be our next steps ?

is federated index mandatory to create ? if yes all the indexes across SHs should be created ?'

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Transparent Mode does not use federated indexes so there's no need to create them.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

We  need more information.  Next steps to accomplish what?  What are you trying to do with FS?  Are you planning to use Standard mode or Transparent mode?

---
If this reply helps you, Karma would be appreciated.

ssuluguri
Path Finder

Transparent Mode .

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Transparent Mode does not use federated indexes so there's no need to create them.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques (Part 3)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Digital Resilience Assessment Launch | How prepared are you for disruption?

Disruption is inevitable. The question is – how prepared are you to handle it? In today’s fast-moving digital ...

Buttercup Games: Further Dashboarding Techniques (Part 2)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...