Objective 8.5
Cloud Certified AdminUse the HTTP Event Collector (HEC) to get data into Splunk
Objective 8.5 sits in Network and Other Inputs, which carries 10% of the Cloud Certified Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.
Objective title verbatim from the official objectives. Splunk exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
A development team wants their application to deliver its own events to your deployment without installing anything on the host. What does the HTTP Event Collector let them do?
Correct.
Checked against help.splunk.com, August 2026Concept
Letting an application post its own events removes the file on disk and the agent that would read it. The trade is that the application now owns delivery.
Why C
Splunk states that the HTTP Event Collector lets you send data and application events to a Splunk deployment over the HTTP and Secure HTTP protocols.
Source
Splunk Docs: Set up and use HTTP Event Collector in Splunk Web, checked August 2026The HTTP Event Collector (HEC) lets you send data and application events to a Splunk deployment over the HTTP and Secure HTTP (HTTPS) protocols.
Now you: objective 8.5 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 2
Your developers must configure a logging library to send events to HEC without putting any user credentials in the application. Which authentication model does HEC use?
Sample question 2 of 2
An application sends its events straight to HEC using a token held in its logging library. What does that arrangement remove the need for?
Full Cloud Certified Admin question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.