Splunk Core Certified User — Question 134

_______________ transforms raw data into events and distributes the results into an index.

Answer options

• A. Index
• B. Search Head
• C. Indexer
• D. Forwarder

Correct answer: C

Explanation

The correct answer is C, Indexer, which is responsible for processing raw data into events and storing them in an index. Option A, Index, refers to the storage location but does not perform the transformation. Option B, Search Head, is used for searching and reporting but does not process raw data. Option D, Forwarder, is used to send data to the Indexer but does not transform the data itself.