Andreas, thank for the quick response.   Unfortunately, I am using Splunk Cloud, and I see in your "curl.py" file that VERIFYSSL is "Forced to be True for Splunk Cloud Compatibility". So, while "curl -k" works from the LINUX command line on my Splunk server,  in Splunk SPL the "| curl verifyssl=false" is overridden in the add-on's python code. Is there any way to override ??? If not, I will have to find another way to do this, as I am constrained by my environment. ... View more

Hi @fliwei, Some of the DHCP servers are sending to the Indexers via a 7.2.3 UF, others are sending via the 7.2.3 UF, to 7.2.3 HF, and then to the Indexers.  No Joy. The v6.0.0 TA and the v8.0.0 TA are compatible with Splunk v7.2.3     ... View more

I am having the same issue. Everything had been collecting correctly for the past year, when it suddenly stopped collecting on the Sunday of the Memorial Day weekend.  Now, at best it is only collecting the 31 line header, and ignoring the hundreds/thousands of lines below the header. We are running Splunk Enterprise v7.2.3; using the 7.2.3 Universal Forwarder; and using the the Windows TA v6.0.0 (and will be testing v8.0.0 as a possible solution). The "solution" provided later in this thread is not workable for me, so any other inputs would be appreciated. ... View more