Is there any workaround to send uncooked data from Splunk HF to Cribl?
Hey, Is there any workaround to send uncooked data from Splunk HF to Cribl? (dest::Splunktcp) The issue is that the EB(Cribl) is not taking any effect (I'd read before it will be skipped by design limitations). tried to set sendCookedData = false but the data flow had stopped eventually, then added negotiateProtocolLevel = 0 but it didn't help, other trial was to use dest::tcp source but ingestion has stopped as well. Any ideas how we can overcome this scenario.