Editorial question60.9K views4,321 votes0 answers4,673 following
AI-generatedWhich Splunk versions require a service restart for HEC token revocation to take effect?
Testing HEC token revocation behavior across Splunk versions When validating an integration against a non-production Splunk instance, teams often create dedicated HEC tokens, send test events, then revoke the token to confirm rejection. The documentation indicates that revocation takes effect only after the next authentication handshake, creating a window wh
splunk