The ES (Enterprise Security) application should be uploaded to the search head. The search head is responsible for managing the search functionality, user interface, and running scheduled searches in Splunk, making it the appropriate component for hosting the ES application.