receiving

noun

The act of receiving parsed or unparsed data from a forwarder. The Splunk indexer receiving the data is called a receiver. In a Splunk deployment, a receiver can be simultaneously receiving data from dozens or hundreds of forwarders. Just as receivers perform receiving, forwarders perform forwarding.

Related terms

For more information

In the Distributed Deployment Manual:

configuration

configuration file

event processing

character set encoding

segmentation

segment

timestamping

timestamp, timezone offset

default field extraction

host, source, source type, punct


archiving

retention time