Hi Splunkers,
Good day. My HEC tokens are currently configured in the Indexer Cluster, and during Indexer Bundle Push specifically during bundle reload, the HEC logging drops to 0. Is this normal?
HEC logs are indexing during bundle validation, indexer rolling restart, but not during the bundle reload.
Bundle Validation -> Bundle Reload -> Indexer Rolling Restart
HEC logging is also not distributed properly across indexers.
Seeking advise.
Thank you and Kind Regards,
Ariel
