Splunk is also expanding its Federated Search feature to include Amazon S3 incidents, enabling unified searching of data at rest contained within S3 buckets without having to process the data through Splunk. This marks a shift in the company’s strategy, recognizing that storing all data within Splunk may not always be practical due to increasing data volumes and diverse data sources.
