I had configured splunk forwarder and receiver in a Linux system as per the Admin manual. I tried searching the forwarded events in the CLI screen using "host" flag. The search returns no data in the CLI. What should I do to get the events in the receiver server? Can you please help?
You should be searching based on the host value you specified for the input data. The above metrics.log event only confirms that data has been sent, and there is only a very small amount (5k). Typically, you can search for your data based on the host, source, or sourcetype. So utilizing a wildcarded search with the source name (timerange over all-time) might be a way to find your data. Another possibility is that your events are so small that Splunk has not filled the buffer queue. In that case, you should try sending a complete log file.