Linux logs on app for infrastructure

Hi, on the docs page Collect Linux Unix metrics and logs with Splunk App for Infrastructure it gives an option for using a script generated by the UI. However, there it asks for a HEC port and token. I could not find why this is needed if we are using a forwarder...