Running a query from your machine to another machine.

[ashari]

Hi,
Can we tell Splunk to run a query on another machine and return back with an answer. I am working in shared environment where data is coming from a network that includes firewall data,windows etc. I want to run query as an administrator from computer onto another computer, let say on NOC computer.

Thanks.

[grijhwani · Accepted solution]

Sounds like you are talking about distributed searches, which is an Enterprise feature (only) where you have a search portal capable of interrogating multiple indexers.

[rsennett_splunk]

can you give a bit more context to your question? Are you asking about using the SDK or the REST API? Or are you asking if you can implement a local search head that points to a remote indexer? All of those are possible... but a bit more detail would help us narrow down the answer for you.