Splunk server

noun

A running copy of the Splunk software. A Splunk server can be configured to index, forward, or index and forward. Multiple Splunk servers can be configured for data distribution and distributed search.


For more information

In the Install Manual:

In the Distributed Deployment Manual:

configuration

configuration file

event processing

character set encoding

segmentation

segment

timestamping

timestamp, timezone offset

default field extraction

host, source, source type, punct


archiving

retention time