The route that data takes through Splunk Enterprise, from its origin in sources such as log files and network feeds, to its transformation into searchable events that encapsulate valuable knowledge. The data pipeline includes these segments:
You can assign each of these segments to a different Splunk Enterprise instance or component.
For more information
In the Distributed Deployment Manual: