The default behavior is to consume from the latest checkpoint. But sometimes we want to start from the beginning to let data flow from Kafka to Splunk. Is there a way to do that?
Does this blog I googled help ?
FYI , you can also set auto.offset.reset=smallest in your Splunk Kafka confguration like :