- Hello,
we are facing an issue with inputs on our Splunk infra with app TA-Zscaler-CIM.
we are trying to implement both collect on same Heavy Forwarder dedicated to pulling but it’s seems that checkpoint use for each input have same _key values on kv_store (collection).
Python code define checkpoint key as “checkpoint” without any value linked to input so if we define 2 differents input in the same app, we are not able to collect all logs due to checkpoint modification on same kv_store.
Are you able to fix this in next feature ?