SOC Collector running. Use /ingest to POST JSON events. See /health and /metrics.