How can indexer acknowledgement be enabled for HTTP Event Collector (HEC)?

 The correct answer is B, C, and D because these are the ways to enable indexer acknowledgement for HTTP Event Collector (HEC). Indexer acknowledgement is a feature that ensures that the data sent to HEC is successfully indexed by Splunk before deleting it from the sender. Option B is correct because you can use a REST request to create a token with the indexer_ack property set to 1. Option C is correct because you can select the checkbox labeled “Enable indexer acknowledgment” when creating a new HEC token in Splunk Web. Option D is correct because you can select the checkbox labeled “Enable indexer acknowledgment” when updating the Global Settings for HEC in Splunk Web. Option A is incorrect because indexer acknowledgment is not turned on by default. You can find more information about indexer acknowledgment for HEC in the Splunk Developer Guide.