Hey i want to setup stream add-on on splunk for a distributed environment where I have one HF, one Indexer and one SH , I want to setup for forwarding DNS logs only. Can someone tell me how to configure and setup??