receiver

noun

A Splunk server that receives data from a forwarder. The receiver is either a Splunk indexing server or another forwarder, configured to receive data from one or more forwarders.

The forwarder is a smaller footprint version of Splunk. It functions as a lightweight, all-purpose agent.

For more information

In the Distributed Deployment Manual:

configuration

configuration file

event processing

character set encoding

segmentation

segment

timestamping

timestamp, timezone offset

default field extraction

host, source, source type, punct


archiving

retention time