The SentinelOne Add-on (aka TA, for Technical Add-on) for Splunk, which has the data collection role, and the SentinelOne Application for Splunk, which has the search and display role (user interface).