I am unable to find host when I use host = hostname as query, but I can find same host when I use index=_introspection host=hostname
host = hostname
Your role is not configured to search the _introspection index by default, that's why specifying it explicitly works, but omitting it does not.
View solution in original post
Thank you for your response .I having an admin role.