Each HEC input requires a unique name but token values can be shared. The name is a human-readable identifier for the input that appears in Splunk Web. The name must be unique among all HEC inputs on the same Splunk platform instance. The token value is a string of alphanumeric characters that acts as an identifier and an authentication code for the input. You can use the same token value for multiple inputs, but it is recommended to use different tokens for different data sources or applications. References :=
Set up and use HTTP Event Collector in Splunk Web
HTTP Event Collector: How to Install and Configure HEC in Splunk Web
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit