Splunk Search Head

GPTKB entity

Statements (50)
Predicate Object
gptkbp:instanceOf gptkb:software
gptkbp:canBeClustered true
gptkbp:canBeDeployedOn standalone
clustered
gptkbp:clusterType Search Head Cluster
gptkbp:communicatesVia gptkb:Splunk_Indexer
gptkbp:connectsTo multiple indexers
gptkbp:developedBy gptkb:Splunk_Inc.
gptkbp:documentation https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/AboutSHC
gptkbp:firstReleased 2006
gptkbp:function aggregates search results
distributes search requests
manages user access
searches indexed data
https://www.w3.org/2000/01/rdf-schema#label Splunk Search Head
gptkbp:manages user authentication
role-based access control
gptkbp:partOf gptkb:Splunk_platform
gptkbp:provides gptkb:REST_API
gptkb:mobile_application
gptkbp:requires gptkb:Splunk_license
gptkbp:runsOn gptkb:Windows
gptkb:macOS
gptkb:Linux
gptkbp:supports pivot
reports
tags
visualizations
alerts
dashboards
distributed search
data models
saved searches
event types
scheduled searches
summary indexing
workflow actions
data acceleration
knowledge objects
lookups
notable events
search acceleration
search apps
search head pooling (deprecated)
search macros
search-time field extractions
gptkbp:usedIn gptkb:Splunk_Enterprise
gptkb:Splunk_Cloud
gptkbp:bfsParent gptkb:Splunk_Enterprise
gptkbp:bfsLayer 7