I would like to monitor forwarder indexing performance via S.O.S. The _internal already forwarded to indexer and could be searched as "index=_internal host=fwd" on indexer. But I could not find it on the dropbox "Server to query" in S.O.S. Overview or any other dashboard.
Do I need to modify anything or any steps I did wrong?
Thanks!