What are components of Splunk/Splunk architecture?
Below are components of Splunk:
- Search head – provides GUI for searching
- Indexer – indexes machine data
- Forwarder – Forwards logs to Indexer
- Deployment server – Manages Splunk components in distributed environment