Hi I'm using the Splunk Add-On for Salesforce in Splunk Cloud and checking for any errors raised by the add-on by using this query index=_internal sourcetype=sfdc:object:log "stanza_name=xxx" And for every index run, this error is generated about the cce_plugin_sfdc. Anyone having similar issues? file=plugin.py, func_name=import_plugin_file, code_line_no=63 | [stanza_name=xxx] Module cce_plugin_sfdc aleady exists and it won't be reload, please rename your plugin module if it is required.   ... View more

Hi I'm using this add-on on SplunkCloud to index custom Salesforce objects and using the LastModifiedDate as the query criteria. When I look at the Salesforce queries in  the _internal logs, I see Splunk is periodically skipping over some rows For instance, Splunk will send this query to get the next batch of records to index SELECT .. WHERE LastModifiedDate > 2021-11-25T10:10:51.000+0000 ORDER BY LastModifiedDate ASC LIMIT 1000   The FIRST ROW in the result has the LastModifiedDate of 2021-11-26T0910:04.000Z - which I would expect Splunk to use in it's next indexing round. However,  the next entry in the _internal logs sends a different dateTime effectively missing data logged between 9:10:04 and 09:15:33 SELECT ... WHERE LastModifiedDate=2021-11-26T09:15:33.000+0000   I'm making an assumption this is how the Add-On works as I can't find any documentation that explains it. Has anyone had this issue and more importantly, found a fix? I query the _internal logs using this search index=_internal sourcetype=sfdc:object:log "stanza_name=<my stanza>"   Thanks!   ... View more