Cisco E3A-SK-FS3P-P Premium Federated Search

Search connected Splunk environments from a federated investigation workflow rather than limiting analysis to data held within one local deployment. Cisco E3A-SK-FS3P-P provides a Federated Search entitlement with premium searches allocated per day. It applies to teams investigating security events, operational incidents, or service conditions across distributed data estates where relevant search targets remain in separate Splunk environments. Federated Search is the defining capability of this entitlement. It supports queries spanning connected environments, helping analysts work across distributed data sources from a coordinated search process. The premium-search component is measured on a daily basis, making this entitlement appropriate where premium federated-search activity needs an explicit daily allocation instead of being treated as a general storage or data-ingest metric. Select this entitlement when the requirement is specifically Federated Search with premium searches per day. It is a software license, not an appliance, network interface, or storage expansion. The product scope centers on federated query activity and its daily premium-search allocation, so it should be matched to the intended Splunk search architecture and expected investigation workflow.