How can indexer acknowledgement be enabled for HTTP Event Collector (HEC) ? (Select all that apply.)
A) No need to do anything, it is turned on by default.
B) When a REST request is sent to create a token, the property for indexer acknowledgement must be set to 1.
C) When a new HEC token is created in Splunk Web, select the checkbox labeled "Enable indexer acknowledgement".
D) When the Global Settings for HEC are updated in Splunk Web, select the checkbox labeled "Enable indexer acknowledgement".
Correct Answer:
Verified
Q2: Which Splunk REST endpoint is used to
Q3: Which of the following is true of
Q4: A KV store collection can be associated
Q5: Which type of command is tstats ?
A)
Q6: When output_mode is not used, which element
Q8: Which of the following are types of
Q9: Using Splunk Web to modify config settings
Q10: Which of the following are ways to
Q11: Assuming permissions are set appropriately, which REST
Q12: When added to an app's default.meta file,
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents