Updated the hugo local host pages with REmark on LOC and not using RAW hec endpoints

Author: hagen-p

content/en/resources/local-hosting/multipass.md

@@ -23,6 +23,15 @@ Change into multipass directory:
 cd observability-workshop/local-hosting/multipass
 ```
 
+Log Observer Connect:
+
+If you plan to use your own Splunk Observability Cloud Suite Org and or Splunk instance, you may need to create a new **Log Observer Connect** connection:
+Follow the instructions found in the [documentation](https://docs.splunk.com/observability/en/logs/lo-connect-landing.html) for [Splunk Cloud](https://docs.splunk.com/observability/en/logs/scp.html#logs-scp) or [Splunk Enterprize](https://docs.splunk.com/observability/en/logs/set-up-logconnect.html).
+
+Additional requirements for running your own **Log Observer Connect** connection are:
+Create an index called **splunk4rookies-workshop**
+Make sure the Service account user used in the **Log observer Connect** Connection has access to the **splunk4rookies-workshop** index. (You can remove all other indexes, as all workshop log data should go to this index)
+
 Initialise Terraform:
 
 {{< tabs >}}
@@ -70,6 +79,7 @@ The following Terraform variables are required:
 
 Instance type variables:
 
+- `splunk_hec_url`:  Do not use a Raw Endpoint, but use an Event Endpoint as this will process the logs correctly
 - `splunk_presetup`: Provide a preconfigured instance (OTel Collector and Online Boutique deployed with RUM enabled). The default is `false`.
 - `splunk_diab`: Install and run Demo-in-a-Box. The default is `false`.
 - `tagging_workshop`: Install and configure the Tagging Workshop. The default is `false`.

content/en/resources/local-hosting/orbstack.md

@@ -10,6 +10,15 @@ Install Orbstack:
 brew install orbstack
 ```
 
+Log Observer Connect:
+
+If you plan to use your own Splunk Observability Cloud Suite Org and or Splunk instance, you may need to create a new **Log Observer Connect** connection:
+Follow the instructions found in the [documentation](https://docs.splunk.com/observability/en/logs/lo-connect-landing.html) for [Splunk Cloud](https://docs.splunk.com/observability/en/logs/scp.html#logs-scp) or [Splunk Enterprize](https://docs.splunk.com/observability/en/logs/set-up-logconnect.html).
+
+Additional requirements for running your own **Log Observer Connect** connection are:
+Create an index called **splunk4rookies-workshop**
+Make sure the Service account user used in the **Log observer Connect** Connection has access to the **splunk4rookies-workshop** index. (You can remove all other indexes, as all workshop log data should go to this index)
+
 Clone workshop repository:
 
 ``` bash
@@ -22,7 +31,8 @@ Change into Orbstack directory:
 cd observability-workshop/local-hosting/orbstack
 ```
 
-Copy the `start.sh.example` to `start.sh` and edit the file to set the following required variables:
+Copy the `start.sh.example` to `start.sh` and edit the file to set the following required variables
+Make sure  that you do not use a Raw Endpoint, but use an Event Endpoint instead as this will process the logs correctly
 
 - `ACCESS_TOKEN`
 - `REALM`