Splunk Exam SPLK-1003 Topic 13 Question 108 Discussion

The HTTP Event Collector (HEC) supports indexer acknowledgment to confirm event delivery. Each acknowledgment is associated with a unique GUID (Globally Unique Identifier).

GUID ensures events are not re-indexed in the case of retries.

Incorrect Options:

B, C, D: These are not valid channel values in HEC acknowledgments.

References:

Splunk Docs: Use indexer acknowledgment with HTTP Event Collector