As pointed out in the review of
NIFI-7801, there is a corner case where the processor might considers status of indexing as unacknowledged without polling. This might happen when the FF is not being processed by QuerySplunkIndexingStatus before the TTL runs out. Please see the following comments:
As a solution, a flag or counter should be introduced which would prevent the processor from giving up on the FF without trying the poll at least once.