Multiple Choice
Which statements are true regarding HEC (HTTP Event Collector) tokens? (Select all that apply.)
A) Multiple tokens can be created for use with different sourcetypes and indexes.
B) The edit token http admin role capability is required to create a token. The edit token http admin role capability is required to create a token.
C) To create a token, send a POST request to services/collector endpoint. To create a token, send a POST request to services/collector endpoint.
D) Tokens can be edited using the data/inputs/http/{tokenName} endpoint. Tokens can be edited using the data/inputs/http/{tokenName}
Correct Answer:

Verified
Correct Answer:
Verified
Q32: Which of the following is a security
Q33: Which of the following are types of
Q34: How can hiding or showing a panel
Q35: Searching "index=_internal metrics | head 3" from
Q36: Which of the following Simple XML elements
Q37: Log files related to Splunk REST calls
Q38: Which type of command is tstats ?<br>A)
Q40: When added to an app's default.meta file,
Q41: Which of the following describes a Splunk
Q42: Data can be added to a KV