https://community.splunk.com/t5/Getting-Data-In/Why-am-I-having-this-issue-with-HEC-guid/m-p/608927#M105619 <P>I have ack enabled for a HEC input. I can successfully send data into splunk with guid #1. With the same curl but a different guid #2 the data is not in splunk but the response is Success and the ack Id request also returns true.</P> <P>I looked in splunkd.log and I see this:</P> <P class=""><SPAN class="">08-09-2022 17:10:04.755 -0700 ERROR JsonLineBreaker [49865490 parsing] - JSON StreamId:0 had parsing error:Unexpected character while looking for value: 'c' - data_source="http:dev", data_host="host:8088", data_sourcetype="sourcetype_name"</SPAN></P> Wed, 10 Aug 2022 14:12:51 GMT klim 2022-08-10T14:12:51Z https://community.splunk.com/t5/Getting-Data-In/Why-am-I-having-this-issue-with-HEC-guid/m-p/608927#M105619 <P>I have ack enabled for a HEC input. I can successfully send data into splunk with guid #1. With the same curl but a different guid #2 the data is not in splunk but the response is Success and the ack Id request also returns true.</P> <P>I looked in splunkd.log and I see this:</P> <P class=""><SPAN class="">08-09-2022 17:10:04.755 -0700 ERROR JsonLineBreaker [49865490 parsing] - JSON StreamId:0 had parsing error:Unexpected character while looking for value: 'c' - data_source="http:dev", data_host="host:8088", data_sourcetype="sourcetype_name"</SPAN></P> Wed, 10 Aug 2022 14:12:51 GMT https://community.splunk.com/t5/Getting-Data-In/Why-am-I-having-this-issue-with-HEC-guid/m-p/608927#M105619 klim 2022-08-10T14:12:51Z