In a customer managed Splunk Enterprise environment, what is the endpoint URI used to collect data?

The correct answer is A. services/collector. Splunk's HTTP Event Collector (HEC) listens at the endpoint URI 'services/collector' (full path: https://<host>:<port>/services/collector). This is the standard endpoint for sending JSON-formatted event data to Splunk over HTTP/HTTPS using a token-based authentication model. The

Splunk Deployment and Licensing

Question

Options

Aservices/collector
Bdata/collector
Cservices/inputs?raw
Dservices/data/collector

How the community answered

(59 responses)

A
88% (52)
B
3% (2)
C
7% (4)
D
2% (1)

Explanation

Splunk's HTTP Event Collector (HEC) listens at the endpoint URI 'services/collector' (full path: https://<host>:<port>/services/collector). This is the standard endpoint for sending JSON-formatted event data to Splunk over HTTP/HTTPS using a token-based authentication model. The other options are not valid Splunk HEC endpoints: 'data/collector' (B), 'services/inputs?raw' (C), and 'services/data/collector' (D) are all incorrect. HEC also supports 'services/collector/raw' for raw text data and 'services/collector/event' as an explicit alias, but the base endpoint is 'services/collector'.

Topics

#HTTP Event Collector#Data Ingestion#API Endpoint#HEC URI

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice