Examice

Exam SPLK-3003 All QuestionsBrowse all questions from this exam

Go to Exam

Question 47

What is required to setup the HTTP Event Collector (HEC)?

Each HEC input requires a unique name but token values can be shared.

Each HEC input requires an existing forwarder output group.

Each HEC input entry must contain a valid token.

Each HEC input requires a Source name field.

Correct Answer: C

Each HEC input entry must contain a valid token. The HTTP Event Collector (HEC) requires that each input entry has a valid token to authenticate and allow data to be sent into Splunk. This token is essential for the functioning of HEC, ensuring that the data being collected is authorized and accepted.

Discussion

pepeperezOption: C

I think it needs a valid token

RedtonyeahOption: C

I think C

Simon_UAOption: A

HEC input requires a unique name but token values can be shared.

saraque

You can't share the token in the splunk configs, you can share the same token for other integration (SC4S for ex...). In this case, Yes... you have to type a unique name of HEC, but they are going to generate a unique token. For that reason, the answer is C