Hi,
Interested in knowing if federated search results from Splunk Cloud could be stored in a summary index located in a On-Premise Enterprise instance / cluster?
The thought is this could allow to offload some high usage dashboards to On-Premise and allow for data correlation with On-premise data.
Thank you