Hi @Nrosemommy ,
could you better describe your infrastructure?
have you a Forwarder?
did you configured it to send logs to Splunk?
did you confgured Splunk to receive logs?
did you used an add-on?
which logs do you want to send?
how did you checked the situation you're reporting?
Ciao.
Giuseppe
Could you clarify what you mean by "What are you looking for exactly?" Are you asking what specific information needs to be checked to determine where the data is being sent, or are you referring to something else?