What is Search Head? Can it be seen in the UI?

[gokikrishnan198]

In the Splunk Architeture, it is known that Splunk has major 3 components.

1. Forwarder - Instance installed at the log collection devices
2. Indexer - Virtual Instance installed with SPLUNK for parsing the collected logs
3. Search Head - Not very clear about where do we have it. Can somebody explain in non-technical words, what is a Search Head and Where can we find it?

[493669]

Search Head is the one which we use for searching the logs from indexer...
Basically the Full Splunk instance can act as Heavy Forwarder/Indexer/Search head...its just a configuration due to which it acts different.
https://answers.splunk.com/answers/1324/what-is-a-search-head.html

[dauren_akilbeko]

Refer to this question:
https://answers.splunk.com/answers/1324/what-is-a-search-head.html

And to this doc:
http://docs.splunk.com/Documentation/Splunk/7.1.3/Capacity/ComponentsofaSplunkEnterprisedeployment