The instructions are not clear on this. I am running a clustered index tier, however it says an eventcollector has to be enabled. We have an eventcollector, and the app is installed on the actual search head. What value are you to put in the indexer hostname? I tried using the value the eventcollector uses for its indexing tier, but that doesnt seem to work.
The host name is the name of network host (or domain name) from which the events originated.
You can set a Host name as a:
• Constant Value
• Regular expression on path
• Segment in path