Question

What is Splunk Indexer? What are the stages of Splunk Indexing?

Answer 1

Splunk Indexer is the Splunk Enterprise component that creates and manages indexes. The primary functions of an indexer are:

1. Indexing incoming data
2. Searching the indexed data