What is Splunk Indexer?

Sharad Jaiswal
Sharad Jaiswal

Posted On: Mar 12, 2020

 

The Indexer is one of the components present in the Splunk which is used for indexing and storing the data coming from the forwarder. It transforms the incoming data into events and stores the event in the indexes for efficiently performing the search operations. If the data is received from a universal forwarder, then the indexer will parse the incoming data and index it. If the data is received from the heavy forwarder, then indexer will only index the data. The Splunk Indexer creates number of files as it indexes the data that may contain either the compressed raw data or the indexes that point to the raw data.

    Related Questions

    Please Login or Register to leave a response.

    Related Questions

    Splunk Interview Questions

    What is Splunk?

    Splunk is a software technology which is the first data to everything platform. It is mainly used for monitoring, searching, analyzing, and visualizing the machine-generated data in the real-time. It ...

    Splunk Interview Questions

    Enlist major components of Splunk?

    The three main components in Splunk areSplunk Forwarder, Splunk Indexer, and Splunk Head.Splunk Forwarder - This component is used for collecting logs. They are independent of the main Splun...