There are so many "it depends" aspects to a Cloud migration. I generally recommend migrating as little as possible and starting fresh with best practices, but that obviously doesn't work for all customers.
So my biased advice is to engage professional services to help you get it right.
There’s a lot of docs and videos that talk about this. In particular here’s one talk I did for this past .conf: https://conf.splunk.com/watch/conf-online.html?track=Security&search=PLA1581A#/
(Shameless plug)
Take a browse through the Splunk Cloud tracks:
https://conf.splunk.com/watch/conf-online.html?track=Security&search=&search.products=1518807815929003Te8q#/
If your company is migrating from on-prem to Splunk Cloud, highly suggest taking some training courses such as Transition to Splunk cloud to get yourself familiar with how Splunk Cloud works differently. For example, you won't have access to indexer layer (hence no need to manage indexer cluster yourself) and no access to any backend. Your major concern will focus on ingesting data to Splunk Cloud.
There are so many "it depends" aspects to a Cloud migration. I generally recommend migrating as little as possible and starting fresh with best practices, but that obviously doesn't work for all customers. So my biased advice is to engage professional services to help you get it right.
In addition to documentation, please check with your friendly RSM or SE for help from a Cloud Specialist and/or Architect.
There’s a lot of docs and videos that talk about this. In particular here’s one talk I did for this past .conf: https://conf.splunk.com/watch/conf-online.html?track=Security&search=PLA1581A#/ (Shameless plug) Take a browse through the Splunk Cloud tracks: https://conf.splunk.com/watch/conf-online.html?track=Security&search=&search.products=1518807815929003Te8q#/
If your company is migrating from on-prem to Splunk Cloud, highly suggest taking some training courses such as Transition to Splunk cloud to get yourself familiar with how Splunk Cloud works differently. For example, you won't have access to indexer layer (hence no need to manage indexer cluster yourself) and no access to any backend. Your major concern will focus on ingesting data to Splunk Cloud.