In our previous modules, we understood what is Splunk and what are its products it has to offer us.
Now we will narrow down our topic to just Splunk Enterprise, which is the core product of Splunk.
Once your mastered Splunk Enterprise, you can play around with other products of Splunk, which are
built around Splunk Enterprise.
From now onwards in our discussion, I'll be using just Splunk, which refers to our Splunk enterprise
for simplicity purpose.
Our next topic of discussion in our journey to becoming the Splunk Master is to understand what are
the different components of Splunk?
There are many components of Splunk.
The first component in our list is the Splunk search hat, which is where the visualization part of
the Splunk is carried on the search.
It is the fancy one out of all other components of Splunk.
Since all the visualization, charting and dashboard reports, alerts are configured and view on the
search head.
To define it.
Splunk search is a component of Splunk, which offer a Web interface to visualize and query the data
for reporting, alerting or creating dashboards in Splunk.