I am streaming DNS traffic successfully from some Microsoft DNS servers, however I am unable to populate any 'Estimate' statistics in the Splunk Stream application. Data is coming in, but Splunk isn't reporting on the amount of traffic.
On the initial Stream page, I also have this error if I try to collect data from the localhost (heavy forwarder) where Stream is installed: Failed to detect Splunk_TA_stream status.
Any ideas?
