The repository for data. When the Splunk platform indexes raw data, it transforms the data into searchable events.

Indexes reside in flat files on the indexer.


In general, the act of processing raw data and adding the processed data to an index.

Specifically, indexing is the third segment of the data pipeline, in which the indexer takes parsed events and writes them to the search index on disk.

For more information

In Managing Indexers and Clusters of Indexers:

In the Distributed Deployment Manual: