Exam SPLK-3003 topic 1 question 47 discussion

Actual exam question from Splunk's SPLK-3003

Question #: 47
Topic #: 1

[All SPLK-3003 Questions]

What is required to setup the HTTP Event Collector (HEC)?

A. Each HEC input requires a unique name but token values can be shared.
B. Each HEC input requires an existing forwarder output group.
C. Each HEC input entry must contain a valid token.
D. Each HEC input requires a Source name field.

Show Suggested Answer

Suggested Answer: C 🗳️

by Redtonyeah at May 23, 2022, 4:38 a.m.

Comments

Submit Cancel

pepeperez

Highly Voted 1 year, 9 months ago

Selected Answer: C

I think it needs a valid token

upvoted 5 times

...

Simon_UA

Most Recent 5 months, 2 weeks ago

Selected Answer: A

HEC input requires a unique name but token values can be shared.

upvoted 1 times

You can't share the token in the splunk configs, you can share the same token for other integration (SC4S for ex...). In this case, Yes... you have to type a unique name of HEC, but they are going to generate a unique token. For that reason, the answer is C

upvoted 1 times

...