Event Collector third-party certificates

[martaBenedetti]

Hi Community,

I have this global setting in inputs.conf:

[http]
enableSSL = 1
port = 8088
requireClientCert = false
serverCert = $SPLUNK_HOME/etc/auth/my_certificates/certificate.cer

I have 2 [token_name] stanzas configured working fine but now I have the need to use a different server certificate for one stanza. So I'd like to do something like this:

[http://stanza1]
token = token1
index = index1
sourcetype = sourcetype1

[http://stanza2]
token = token2
index = index2
sourcetype = sourcetype2
serverCert = $SPLUNK_HOME/etc/auth/my_certificates/certificate_2.cer

I'm not sure it is possible though since in the doc it is written that per-token settings are only these:

• connection_host
• disabled
• index
• indexes
• persistentQueueSize
• source
• queueSize
• sourcetype
• token

Any hint?

Thanks,

Marta