PrepAway - Latest Free Exam Questions & Answers

How can indexer acknowledgement be enabled for HTTP Event Collector (HEC)? (Select all that apply.)

How can indexer acknowledgement be enabled for HTTP Event Collector (HEC)? (Select all that apply.)

A. No need to do anything, it is turned on by default.

B. When a REST request is sent to create a token, the property for indexer acknowledgement must be set to 1.

C. When a new HEC token is created in Splunk Web, select the checkbox labeled “Enable indexer acknowledgement”.

D. When the Global Settings for HEC are updated in Splunk Web, select the checkbox labeled “Enable indexer acknowledgement”.

Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/Data/UsetheHTTPEventCollector


Leave a Reply

Your email address will not be published. Required fields are marked *