Which of the following server roles should be configured for a host which indexes its internal logs locally?
Which of the following server roles should be configured for a host which indexes its internal logs locally?
The correct server role for a host that indexes its internal logs locally is an 'Indexer'. An Indexer in Splunk is responsible for the indexing and storage of log data, transforming raw data into searchable events and storing them locally for later search and analysis.
B is correct