What is Splunk?
We should use heavy forwarder for sending event-based data to Indexers.
Splunk Enterprise is used as a Scalable service in Splunk Cloud.
Which component of Splunk let us write SPL query to find the required data?
All components are installed and administered in Splunk Enterprise on-premise.
Which search string only returns events from hostWWW3?