Can anyone else confirm this works? The md5 function used to create the Authorization header would introduce an extra \n in the http headers. I had to change the code to make it work. In addition, when you restart Splunk, it never closes the subscription. That subscription stays there for a very long time. The sensor could run out available subscriptions and you have to either reboot the sensor or manually issue curl requests to clear the stale subscriptions. How does one go by submitting patches for this?
... View more