Which Splunk versions require a service restart for HEC token revocation to take effect?
Testing HEC token revocation behavior across Splunk versions When validating an integration against a non-production Splunk instance, teams often create dedicated HEC tokens, send test events, then revoke the token to confirm rejection. The documentation indicates that revocation takes effect only after the next authentication handshake, creating a window wh
splunk