Data is not flowing continuously from forwarder to indexer. Please suggest what are possible ways of troubleshooting.
Identify the times when data is or is not flowing. What is special about those times? Review splunkd.log on the forwarder and indexer. Verify the forwarder is running continously.
Forwarder is running continuously
Are there any license warnings in indexer server logs?
No license warnings.
