I have Proofpoint TAP Modular Input ( https://splunkbase.splunk.com/app/3681/) set up in a distributed environment. Due to the expiration of the key, we saw a halt in log ingestion into Splunk. Now we have re-inserted the key and log ingestion has resumed. However, we are missing 2-3 days worth of events due to the key issue. Is there a way to define in the TA to ingest logs from a specific start/stop date?
