Skip to main content
Solved

HEC Indexer Acknowledgment for HEC destinations?

  • Mar 11, 2025 3:24 AM UTC
  • 2 replies
  • 150 views

Is there a good way to enable HEC destinations where the HEC input on the Splunk side has Indexer acknowledgment enabled?

Best answer by Jon Rust

Indexer ACK is not supported by Cribl Stream. Delivery will work, but the ACK will be ignored.

View original

    2 replies

    Jon Rust
    Forum|alt.badge.img
    • Jon Rust
    • Employee
    • Answer
    • Mar 11, 2025 3:42 AM UTC

    Indexer ACK is not supported by Cribl Stream. Delivery will work, but the ACK will be ignored.

    • josh.hart
    • Author
    • New Participant
    • Mar 11, 2025 3:42 AM UTC

    That makes sense. Thanks, @JonRust!

    Terms & ConditionsAccessibility statement