Home > Storage > ObjectScale and ECS > Industry Solutions and Verticals > Dell EMC ECS: Splunk SmartStore Configuration > Solution architecture
The following figure shows the workflow as event data is ingested, indexed and uploaded/downloaded to ECS. When a hot bucket on the local storage cache reaches a certain size, that bucket is uploaded to ECS (warm). If a search includes data that is stored in ECS, that bucket data is downloaded to the local storage cache and presented in search results. In this example, there are two federated ECS sites. Data is replicated between sites so in the event of a site outage, data can still be accessed.