We have 4 indexers in our environment and on each indexer there are different number of splunkd.exe processes. 1 Indexer has 3 while other Indexer has 5..
What is the reason for that?
Splunk can spawn sub processes for other tasks, by example the bucket optimization, and searches.
Look at the job arguments to figure.