Splunk multisearch query support

Products

• Information Centric Analytics

Issue/Introduction

Is it possible to use multisearch/multithread Splunk data source queries with Information Centric Analytics (ICA)?

Environment

Release : 6.x

Component : Splunk Importer

Resolution

Support for Splunk data source queries is currently limited to single threaded queries. For assistance with creating, testing, and validating multisearch/multithreaded and other, more advanced query types, engage professional services.