Splunk Core Certified Advanced Power User — Question 42

Which Splunk component performs indexing and responds to search requests from the search head?

Answer options

Correct answer: B

Explanation

The correct answer is B, the Search peer, as it is specifically designed to index data and respond to search queries from the search head. Option A, the Forwarder, is responsible for sending data to the indexers but does not handle search requests. Option C, the License master, manages licensing and does not participate in data indexing or searching. Option D, the Search head cluster, is a group of search heads that work together but relies on search peers for indexing.