Record updates not reflecting changes in Splunk?

[keljo]

I'm using the Splunk App for Salesforce, and it seems like when we update records on the Salesforce side they are not getting updated in Splunk. For example, the status field (status__c) changes on a record from "New" to "Pending", then to "Complete". The record inside of Splunk only stores the current status at the initial time the record was brought into Splunk, and we never get the changes on that record. Is that how it works, or do I have something set wrong? I am using LastModifiedDate for the order by.

[keljo]

I performed some additional testing, and I think the issue stems from the fact that I changed the order by field in an already existing Salesforce data input query. I don't think it liked this, and my testing shows that I will need to recreate these data inputs if I need to change order by.