how can capture smtp by splunk stream

[satorn_ja]

I set up my server to be mail server, splunk search head, splunk indexer and splunk TA-stream.
After installation i enable smtp on stream config page then try to send/receive e-mail.
I use "source=stream*" on search page, There are no any result on "sourcetyp=stream:smtp"

[vshcherbakov_sp]

Hi satorn_ja,

Did you check if the Wire Data Input is enabled/working on your server? When you install splunk_app_stream, it drops Splunk_TA_stream on your server, but doesn't enable it by default. You can check status/enable it if you to Settings->Data Inputs -> Wire Data.