<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Question on HEC configuration in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Question-on-HEC-configuration/m-p/530066#M89252</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;I have data inputs configured with HEC coming in to index=A and source=http:sourcename1.&lt;/P&gt;&lt;P&gt;I now have logs of similar type which I want to come into the same index (i.e index=A) and with the same source i.e. http:sourcename1, but which would require me to setup a new HEC connection with a new token.&lt;/P&gt;&lt;P&gt;Please let me know if this is possible? Thanks.&lt;/P&gt;</description>
    <pubDate>Thu, 19 Nov 2020 11:03:26 GMT</pubDate>
    <dc:creator>km1986</dc:creator>
    <dc:date>2020-11-19T11:03:26Z</dc:date>
    <item>
      <title>Question on HEC configuration</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Question-on-HEC-configuration/m-p/530066#M89252</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;I have data inputs configured with HEC coming in to index=A and source=http:sourcename1.&lt;/P&gt;&lt;P&gt;I now have logs of similar type which I want to come into the same index (i.e index=A) and with the same source i.e. http:sourcename1, but which would require me to setup a new HEC connection with a new token.&lt;/P&gt;&lt;P&gt;Please let me know if this is possible? Thanks.&lt;/P&gt;</description>
      <pubDate>Thu, 19 Nov 2020 11:03:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Question-on-HEC-configuration/m-p/530066#M89252</guid>
      <dc:creator>km1986</dc:creator>
      <dc:date>2020-11-19T11:03:26Z</dc:date>
    </item>
    <item>
      <title>Re: Question on HEC configuration</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Question-on-HEC-configuration/m-p/530091#M89256</link>
      <description>&lt;P&gt;Yes, it is possible.&amp;nbsp; Set up the new token the same way you set up the old one.&lt;/P&gt;</description>
      <pubDate>Thu, 19 Nov 2020 14:12:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Question-on-HEC-configuration/m-p/530091#M89256</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2020-11-19T14:12:15Z</dc:date>
    </item>
  </channel>
</rss>

