Answer Posted / Manish Kumar Singh
Splunk Architecture consists of three main components: Forwarders, Indexers, and Search Heads. Forwarders collect machine data from various devices and send it to Indexers for indexing. Indexers process the data, making it searchable, and can also act as a forwarder if needed. Search Heads receive searches from users and distribute them to Indexers for execution. Results are then returned to the user via Search Heads.
| Is This Answer Correct ? | 0 Yes | 0 No |
Post New Answer View All Answers