All Splunk instances in a distributed environment including Search Heads, Indexers, Heavy & Universal Forwarders require configuration updates to meet customers’ requirements. For example, if
There are three (3) main components that define the Architecture of Splunk. Those three components work together to accomplish Splunk functionality. The three components are