Thanks for your detailed answer. I better don't change any code in Splunk itself as it would be overridden on each Splunk update.
Thanks for the REST API hint. I explicated it in my answer.
... View more
As mentioned in the Kafka doc (7.2.1), SSL is only supported in the new Consumer and Producer API. The Splunk for Kafka Add-on does not use this new API. See question: Is support for Kafka version 0.9 or higher in the pipeline any time soon?
... View more