When working with large data sets, you can send events from the Splunk platform directly to Kafka for ingestion.

See Send data from the Splunk platform directly to Kafka in the Splunk UBA Kafka Ingestion App manual.