I have a new local install of Splunk that I want to use to develop dashboards without making changes to my production install of Splunk Enterprise.
I'd like for my local Splunk server to run queries against my production data without making a separate copy of the prod data.
Am I trying to make my local Splunk a peer, receiver, or some other term?
↧