The KV store captain is the single instance in the app key value store that receives write operations. Other KV store instances replicate data from the captain.
In a search head cluster, when a node receives a write request, the KV store delegates the write to the KV store captain, while the KV store keeps read requests local.
In the Admin Manual:
On the Splunk Developer Portal: