Schema validation failed, unexpected property truncate while editing HEC

[KnightRider]

Hi Team,

Could you please throw some light here?

We are receiving the error "Schema validation failed, unexpected property truncate" while editing the HEC token for modifying the existing sourcetype to a new one.

Appreciate any help here. TIA

[venkatasri]

Hi @KnightRider 

Did you see the splunkd log where HEC is deployed which will reveal more info?

[KnightRider]

@venkatasri I did go through the internal logs on HEC server, but didn't find any valuable information to proceed further troubleshooting. 

[venkatasri]

Try changing in inputs conf file and restart instance and observe splunkd logs for any errors.

[KnightRider]

HEC is on Splunk cloud and as you know, we dont have access to backend.

These hecs were created from backend initially, when we try to access it via UI for updating them, it just pops up with that error.

[venkatasri · Accepted solution]

Ok. Please reach out Splunk Cloud Support there is nothing wrong in updating sourcetype.