https://community.splunk.com/t5/Deployment-Architecture/HEC-Log-Drop-During-Bundle-Reload/m-p/552676#M18834 <P>Hi Splunkers,</P><P>Good day. My HEC tokens are currently configured in the Indexer Cluster, and during Indexer Bundle Push specifically during bundle reload, the HEC logging drops to 0. Is this normal?</P><P>HEC logs are indexing during bundle validation, indexer rolling restart, but not during the bundle reload.</P><P>Bundle Validation -&gt; Bundle Reload -&gt; Indexer Rolling Restart</P><P>HEC logging is also not distributed properly across indexers.</P><P>Seeking advise.</P><P>Thank you and Kind Regards,</P><P>Ariel</P> Mon, 24 May 2021 04:29:48 GMT arielpconsolaci 2021-05-24T04:29:48Z https://community.splunk.com/t5/Deployment-Architecture/HEC-Log-Drop-During-Bundle-Reload/m-p/552676#M18834 <P>Hi Splunkers,</P><P>Good day. My HEC tokens are currently configured in the Indexer Cluster, and during Indexer Bundle Push specifically during bundle reload, the HEC logging drops to 0. Is this normal?</P><P>HEC logs are indexing during bundle validation, indexer rolling restart, but not during the bundle reload.</P><P>Bundle Validation -&gt; Bundle Reload -&gt; Indexer Rolling Restart</P><P>HEC logging is also not distributed properly across indexers.</P><P>Seeking advise.</P><P>Thank you and Kind Regards,</P><P>Ariel</P> Mon, 24 May 2021 04:29:48 GMT https://community.splunk.com/t5/Deployment-Architecture/HEC-Log-Drop-During-Bundle-Reload/m-p/552676#M18834 arielpconsolaci 2021-05-24T04:29:48Z