How can indexer acknowledgement be enabled for HTTP Event Collector (HEC)? (Select all that apply.)

Posted by: Pdfprep Category: SPLK-2001 Tags: , ,

How can indexer acknowledgement be enabled for HTTP Event Collector (HEC)? (Select all that apply.)
A . No need to do anything, it is turned on by default.
B . When a REST request is sent to create a token, the property for indexer acknowledgement must be set to 1.
C . When a new HEC token is created in Splunk Web, select the checkbox labeled “Enable indexer acknowledgement”.
D . When the Global Settings for HEC are updated in Splunk Web, select the checkbox labeled “Enable indexer acknowledgement”.

Answer: CD

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/Data/UsetheHTTPEventCollector

Leave a Reply

Your email address will not be published.