Which of the following is an acceptable value when using the HTTP Event Collector channel indexer acknowledgement capability?

The correct answer is C. GUID. When using the HTTP Event Collector (HEC) with indexer acknowledgement enabled, each data channel must be identified by a GUID (Globally Unique Identifier), also called a UUID. The client generates a GUID for each channel and includes it in the request header (X-Splunk-Request-Ch

Splunk Indexing

Question

Which of the following is an acceptable value when using the HTTP Event Collector channel indexer acknowledgement capability?

Options

AIP Address
BHash Checksum
CGUID
DDNS

How the community answered

(55 responses)

A
7% (4)
B
2% (1)
C
87% (48)
D
4% (2)

Explanation

When using the HTTP Event Collector (HEC) with indexer acknowledgement enabled, each data channel must be identified by a GUID (Globally Unique Identifier), also called a UUID. The client generates a GUID for each channel and includes it in the request header (X-Splunk-Request-Channel). This allows Splunk to track and acknowledge receipt of events per channel. IP addresses, hash checksums, and DNS names are not valid channel identifier formats for HEC acknowledgement.

Topics

#HTTP Event Collector (HEC)#Indexer Acknowledgement#GUID#Data Ingestion

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice