https://community.splunk.com/t5/Getting-Data-In/Can-you-distribute-an-Http-Event-Collector-HEC-without/m-p/431330#M75469 <P>Hi ,</P> <P>I would suggest you to create a serverclass and put the http_input app over there in the Deployment server,<BR /> Then reload the serverclass from the DS. You don't need to restart splunk over there anymore</P> Sat, 27 Oct 2018 15:25:24 GMT iamarkaprabha 2018-10-27T15:25:24Z https://community.splunk.com/t5/Getting-Data-In/Can-you-distribute-an-Http-Event-Collector-HEC-without/m-p/431329#M75468 <P>Hi,</P> <P>I use to share my HEC tokens with the index cluster via deployment server. When I create the new token into Cluster Master, It doesn't require me a restart. But, when I share the inputs.conf via deployment-server and this conf goes to the indexer(or forwarder), It requires a restart in order to enable the new tokens.</P> <P>Is there a way to push the tokens avoiding indexer(or forwarder) restart?</P> Fri, 19 Oct 2018 19:14:06 GMT https://community.splunk.com/t5/Getting-Data-In/Can-you-distribute-an-Http-Event-Collector-HEC-without/m-p/431329#M75468 freaklin 2018-10-19T19:14:06Z https://community.splunk.com/t5/Getting-Data-In/Can-you-distribute-an-Http-Event-Collector-HEC-without/m-p/431330#M75469 <P>Hi ,</P> <P>I would suggest you to create a serverclass and put the http_input app over there in the Deployment server,<BR /> Then reload the serverclass from the DS. You don't need to restart splunk over there anymore</P> Sat, 27 Oct 2018 15:25:24 GMT https://community.splunk.com/t5/Getting-Data-In/Can-you-distribute-an-Http-Event-Collector-HEC-without/m-p/431330#M75469 iamarkaprabha 2018-10-27T15:25:24Z