Hi all,Setting up my first HEC source within Cribl. I'm sending json from Corelight to this new HEC source. Should the HEC services endpoint within Cribl be "/services/collector/event" or "/services/event" ?
Page 1 / 1
by default the HEC input is configured to use `/services/collector/` as the base endpoint url so you'd append `event` or `raw` to that for the full url.
Reply
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.