I was sending logs from ECS instance with de splunk log driver. After we start to send logs from HEC and kinessis using the same token we stop to recive logs form ECS cluster. I think that both implementations does not are intrusive or yes? Do anyone you know what are happenning?