Which Splunk component consolidates the individual results and prepares reports in a distributed environment?

Which Splunk component consolidates the individual results and prepares reports in a distributed environment?
A . Indexers
B . Forwarder
C . Search head
D . Search peers

View Answer

Answer: C

Explanation:

https://docs.splunk.com/Documentation/Splunk/7.3.1/DistSearch/Howuserscancontroldistributedse arches

"From the user standpoint, specifying and running a distributed search is essentially the same as running any other search. Behind the scenes, the search head distributes the query to its search peers, and consolidates the results when presenting them to the user."