As a Splunk SME, I'm tasked to set up the ingestion of Salesforce Marketing Cloud transactional messages into Splunk. We're currently trying to utilize HTTP event collector (HEC) for this but we couldn't get it to work because it's giving us this error: The Marketing Cloud developer I'm working with told me that in order to resolve the above error, we need to figure out how to "verify callbacks" from our end (Splunk) https://developer.salesforce.com/docs/marketing/marketing-cloud/guide/verifyCallback.html I need to know if there's a way to achieve that through HEC or if we need to take an entirely different approach to get the Marketing Cloud events to Splunk.

Hello, I’ve upgraded my FreeBSD server from 13.2-RELEASE to 14.0-RELEASE. Now, Splunk forwarder crashes when I try to start it. I made a clean install of the latest Splunk forwarder: same result. Any hint appreciated.     pid 8593 (splunkd), jid 0, uid 0: exited on signal 11 (no core dump - too large) pid 8605 (splunkd), jid 0, uid 0: exited on signal 11 (no core dump - too large)     edit: last lines of ktrace output 11099 splunkd NAMI "/opt/splunkforwarder/etc/system/default/authentication.conf" 11099 splunkd RET open 3 11099 splunkd CALL fstat(0x3,0x82352cf30) 11099 splunkd STRU struct stat {dev=10246920463185163261, ino=219, mode=0100600, nlink=1, uid=1009, gid=1009, rdev=18446744073709551615, atime=0, mtime=1699928544, ctime=1702914937.560528000, birthtime=1699928544, size=1301, blksize=4096, blocks=9, flags=0x800 } 11099 splunkd RET fstat 0 11099 splunkd CALL read(0x3,0x35c8bc0,0x1000) 11099 splunkd GIO fd 3 read 1301 bytes "# Version 9.1.2 # DO NOT EDIT THIS FILE! # Changes to default files will be lost on update and are difficult to …/… enablePasswordHistory = false passwordHistoryCount = 24 constantLoginTime = 0 verboseLoginFailMsg = true " 11099 splunkd RET read 1301/0x515 11099 splunkd CALL read(0x3,0x35c8bc0,0x1000) 11099 splunkd GIO fd 3 read 0 bytes "" 11099 splunkd RET read 0 11099 splunkd CALL close(0x3) 11099 splunkd RET close 0 11099 splunkd PSIG SIGSEGV SIG_DFL code=SEGV_MAPERR 11084 splunk RET wait4 11099/0x2b5b 11084 splunk CALL write(0x2,0x820c56800,0x2a) 11084 splunk GIO fd 2 wrote 42 bytes "ERROR: pid 11099 terminated with signal 11" 11084 splunk RET write 42/0x2a 11084 splunk CALL write(0x2,0x825106cf7,0x1) 11084 splunk GIO fd 2 wrote 1 byte " " 11084 splunk RET write 1 11084 splunk CALL exit(0x8)