These are process types. "splunkd server" is associated with the main splunkd process and its helper / process-runner. "searches" is associated with search processes. While these are also named "splunkd" they are very different invocations of that binary than the main splunkd service, which is a long-running process. Search processes only run until the search is finished, after which they are terminated. ... View more