Hi @human96
Lols using karma points as bait
splunk standlone is all the components in one server ie SH, IDX and this is more relevant to test and development environmentstandalone concept or architecture is never suggested for production environment As standlone will not support the concepts of High availibiity and Disaster recovery which is an imp feature for a functionality of an application in a production environmentEnd of the day you always want you application to be Up and running 24 X 7 .there is always a chance if any component like software or hardware of the server fails then the whole splunk application might collapse and whatever use case you are trying to achieve using splunk like log monitoring or alerting or dashboard might fail not just for splunk but for the source application And in real world scenarios you don't want you application to have downtime so you prefer distributed architecture
Hope this helps
