Which component of Splunk is primarily responsible for saving data?