How do I adjust offset location of Akamai SIEM Integration?

[Hojeong-Seo]

Hi , IHAC who using Akamai SIEM Integration  to ingest data and the addon is deployed on HF. Now they are trying to move the addon to other HF. Customer thought they need to move offset also. but they don't know the offset location. Anyone advice for offset location on Akamai SEIM Integration App?

[jrobins]

It's a KV store collection and can be found at $SPLUNK_HOME/etc/apps/TA-Akamai_SIEM/default/collections.conf

[VatsalJagani]

You mean checkpoint file right!! Maybe not a direct answer but I would look at the following locations:

* Look for file under App's directory

* Look for file under splunk/var/lib directory

* Look for colllections.conf if present in the App

Hope this helps.

[Hojeong-Seo]

Thank you. I will check with customer. 

[splunk2024]

@Hojeong-Seo  I am also facing the same issue. Can you please help me with the solution.