How can indexer acknowledgement be enabled for HTTP Event Collector (HEC)? (Select all that apply.)
A . No need to do anything, it is turned on by default.
B . When a REST request is sent to create a token, the property for indexer acknowledgement must be set to 1.
C . When a new HEC token is created in Splunk Web, select the checkbox labeled “Enable indexer acknowledgement”.
D . When the Global Settings for HEC are updated in Splunk Web, select the checkbox labeled “Enable indexer acknowledgement”.
Answer: CD
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/Data/UsetheHTTPEventCollector