Splunk Core Certified User — Question 183

What are the three main Splunk components?

Answer options

• A. Search head, GPU, streamer
• B. Search head, indexer, forwarder
• C. Search head, SQL database, forwarder
• D. Search head, SSD, heavy weight agent

Correct answer: B

Explanation

The correct answer is B: Search head, indexer, forwarder, as these are the core components that facilitate data searching, indexing, and forwarding in Splunk. Options A, C, and D contain incorrect components that do not represent the main architecture of Splunk.