Which option accurately describes the purpose of the HTTP Event Collector (HEC)?

Which option accurately describes the purpose of the HTTP Event Collector (HEC)?
A . A token-based HTTP input that is secure and scalable and that requires the use of forwarders
B . A token-based HTTP input that is secure and scalable and that does not require the use of forwarders.
C . An agent-based HTTP input that is secure and scalable and that does not require the use of forwarders.
D . A token-based HTTP input that is insecure and non-scalable and that does not require the use of forwarders.

View Answer

Answer: B

Explanation:

https://docs.splunk.com/Documentation/Splunk/8.2.2/Data/UsetheHTTPEventCollector

"The HTTP Event Collector (HEC) lets you send data and application events to a Splunk deployment over the HTTP and Secure HTTP (HTTPS) protocols. HEC uses a token-based authentication model. You can generate a token and then configure a logging library or HTTP client with the token to send data to HEC in a specific format. This process eliminates the need for a Splunk forwarder when you send application events."