Technical Splunk experts answer questions and provide how-to guidance.
Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk products and use case topics.
In this session, we’ll focus on Federation 2.0 and the latest capabilities and offerings available across Splunk’s federated search portfolio. Join us to learn how Splunk Federation can help you search and analyze data across Splunk environments, external data stores, and understand the different federation options available.
Also, explore how capabilities such as Federated Search for Amazon S3, AWS CloudWatch, DDSS, Cisco SAL, Snowflake, Microsoft Azure and Azure Databricks, can help you gain insights from data where it resides.
What can I ask in this AMA?
- What is Federation 2.0 and how has Splunk’s federation offering evolved from Federation 1.0?
- How do I get started with Federation?
- How do I determine which federation option is right for my data and use case?
- How can I search data stored in Amazon S3, Microsoft Azure, Azure Databricks and other data stores?
- What are some common Federation use cases across security, observability, and platform workflows?
- How can Federation fit into a broader data management and data strategy?
- Anything else you’d like to learn about Federation!