Service accounts and security for Federated Search for Splunk

Before you define a remote Splunk platform deployment as a federated provider, create a service account on that remote deployment. The service account facilitates secure communication between the federated search head on your local Splunk platform deployment and the federated provider.

This topic also discusses the fact that federated search supports HTTPS with TLS 1.2 encryption.

If you need to secure communication between federated search heads and remote search heads using mTLS, see Configure mutually authenticated transport layer security (mTLS) on the Splunk platform.