DataSet can be configured to retrieve HEC logs from an external source (such as DataDog).
- Configuration instructions are similar to the steps outlined here. The primary differences are the endpoint (see step 2) and HEC token (see step 3) for DataSet.
- The ingestion endpoint is https://ingest.us1.dataset.com (the path of /services/collector/event is automatically appended by DataDog and can be left out)
- Contact firstname.lastname@example.org to retrieve your HEC token. The HEC token It is linked to the log write enabled API token (established under the "API Keys" page), however, it's currently not displayed in the DataSet UI.