Getting Data In

One API key to multiple sources

mo86
New Member

Can the same API key be used to ingest multiple different http event collector sources?

Tags (2)
0 Karma

harsmarvania57
Ultra Champion

Hi,

Do you mean HEC token? Then yes you can distribute same HEC token to multiple applications to ingest data in Splunk if request contain index, sourcetype etc. If your request does not contain those information and if you want to store data in different index or if you want to assign different sourcetype for different types of data then I'll suggest to use different HEC tokens.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...