In this chapter, you will learn about the Splunk HTTP event collector (HEC). Metaphorically, the HEC is a catcher's mitt for Splunk to catch data sent to it via HTTP or HTTPS communication.
In this chapter, we will learn about the following topics:
- An overview of the HEC
- How data flows to the HEC
- Generating an HEC token
- Sending events in multiple formats and counts to the HEC
- Enabling and using indexer acknowledgement