The second segment of the data pipeline. Data arrives at this segment from the input segment. This segment is where event processing occurs (where Splunk Enterprise analyzes data into logical components).

After data is parsed, it moves to the next segment of the pipeline, indexing.

Parsing can occur on either an indexer or a heavy forwarder.

For more information

In the Distributed Deployment Manual: