https://community.splunk.com/t5/Splunk-Data-Stream-Processor/splunk-stream-verify/m-p/538703#M13 <P>Hi.&nbsp; My environment is running splunk stream app.</P><P>Logs from my windows environment servers are streamed to a&nbsp; heavy forwarder and then out to splunk cloud.</P><P>The index it falls under is: index=stream</P><P>I am trying to determine if a particular windows server stream data is making it. The streamfwd process on the server is running.&nbsp; The server is named: server1</P><P>At the indexer, I tried running a search of this but nothing returns:&nbsp; index=stream host=server1</P><P>If I run a search like this, I see one HOST and 100+ hostnames in the same event: index=stream hostname{}=server1</P><P>Any recommendation?</P><P>&nbsp;</P> Fri, 05 Feb 2021 01:18:56 GMT verifi81 2021-02-05T01:18:56Z https://community.splunk.com/t5/Splunk-Data-Stream-Processor/splunk-stream-verify/m-p/538703#M13 <P>Hi.&nbsp; My environment is running splunk stream app.</P><P>Logs from my windows environment servers are streamed to a&nbsp; heavy forwarder and then out to splunk cloud.</P><P>The index it falls under is: index=stream</P><P>I am trying to determine if a particular windows server stream data is making it. The streamfwd process on the server is running.&nbsp; The server is named: server1</P><P>At the indexer, I tried running a search of this but nothing returns:&nbsp; index=stream host=server1</P><P>If I run a search like this, I see one HOST and 100+ hostnames in the same event: index=stream hostname{}=server1</P><P>Any recommendation?</P><P>&nbsp;</P> Fri, 05 Feb 2021 01:18:56 GMT https://community.splunk.com/t5/Splunk-Data-Stream-Processor/splunk-stream-verify/m-p/538703#M13 verifi81 2021-02-05T01:18:56Z