Question: what are the three main processing components of splunk?
Answer: Splunk Forwarder, used for data forwarding. Splunk Indexer, used for Parsing and Indexing the data. Search Head, is a GUI used for searching, analyzing and reporting.