Verifying that Splunk is receiving data

To verify that Splunk is receiving Indicator and Detection events, from Splunk home navigate to the Forescout Splunk DataForwarder application and use the search bar. Indicator data looks as follows: