Below are the components of Splunk: Search Head: Provides the GUI for searching Indexer: Indexes the machine data Forwarder: Forwards logs to the Indexer Deployment Server: Manges Splunk components in a distributed environment