Is compression (like Gzip) supported in HEC batched payload ? One of the Splunk blog mentioned it, but can't find any relevant info in user/developer guide. Can someone please confirm and share docs if supported?
... View more
I am planning to use HEC on heavy forwarder(s) which will forward to the indexer(s).
My question: Is HEC designed to return any error(s) to the sender if it can't keep up with volume of input? Does in-memory input queue configuration have any impact on response?
... View more