Hello, Issue was resolved in NiFi's Slack Channel. Apparently I filled in username/password for Splunk in PutSplunkHTTP processor which are also passed in the final URL and are actually not needed. They were removed and now data go to Splunk via HEC. Thanks ... View more