The whitepaper that details a Splunk multi-tenancy architecture describes a "Search Bridge" (https://www.splunk.com/blog/2016/01/22/msaas-a-conceptual-multi-splunk-architecture-framework-for-multitenant-splunk-deployments-for-msps-mssps-and-enterprises.html), where each "tenant" is a separate department or company.
Can anyone point out documentation, or explain how to configure a search head for multiple / separate indexer environments (e.g. Search Bridge)?
Thanks,
Gord T.
... View more