To get the HTTP Event Collector to work, you first needed to configure the global settings. This defines the HTTP endpoint it will listen on - typically port 8088. This single port can receive multiple different types of data, since it is all differentiated by the token that is passed with it and by interpreting the data within the payload of the request. Other global defaults can be set, such as the index and sourcetype.
To set up the HTTP Event Collector for a specific data input, you needed to create a token. When setting up the token, you defined a default index and default sourcetype. These values will be used unless the data itself contains the values to use. The set of indexes that can be used by that token also have ...
