Which component of Splunk let us write SPL query to find the required data?
Which component of Splunk let us write SPL query to find the required data?
The correct component of Splunk that allows users to write SPL queries to find the required data is the Search Head. The Search Head is responsible for providing user interfaces to perform searches, create reports and dashboards, and manage data using SPL (Search Processing Language). Forwarders, Indexers, and Heavy Forwarders serve different roles in data collection, indexing, and forwarding within Splunk’s architecture.
D is correct