When do you suppose Splunk Stream will be fully supported on 7.2, as designated in Splunkbase as compatible? It hasn't been updated in close to a year.
Compatibility with Splunk Enterprise 7.2 was documented with the release of Splunk Stream 7.1.3 in April.