Restrictions for standard mode federated search

Splunk Enterprise

<html>

Hello

If you look at the search manual, one of the restrictions is the inputlookup command.
[Search manual]

Standard mode federated search does not support the following:

Generating commands other than search, from, loadjob, mstats, or tstats. For example, federated searches cannot include the datamodel or inputlookup commands. You can find a list of generating commands in Command types, in the Search Reference.

Is this inputlookup a constraint on local Splunk? Or is it a remote restriction?

Thank you

</html>

Get Updates on the Splunk Community!

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members! The ...

Join the Conversation