Currently we're running our whole environment on a local splunk account for SH, IDX, CM, DS, etc, all on linux os.
Is it possible to run different components with different service accounts? Would it be possible to use a different service account, using AD network group for the DS and leave all other components as is (using a local user account)?
Yes, you don't have to run all instances under the same account. They communicate over the network so they have no idea (nor do they care) what the other ID is.