Hello, We have WebApp within a Company. It is necessary to receive Authorization Requests (AR) from WebApp for online scoring. We have Splunk Enterprise installation. Authorization requests from WebApp should go directly (or through an intermediate components) to Splunk. We need to use 50+ rules (searches) for each coming authorization requests and get an answer (search result) in less than 1 second and send that answer back to the WebApp. Suppose that we need the depth of analysis no more than 24 hours. Based on Splunk search result WebApp decides to allow the client access to the personal account or to deny or send a request to the client for additional verification. Between the WebApp and Splunk, we can use the intermediate components (for example, a stream-processing software like Apache Kafka) Questions: Are there any examples of implementation of such solutions? What is the Splunk architecture of such a solution and what kind of intermediate components are used? What are the estimated hardware requirements for Splunk installation? ... View more