AWS logs via Kinese splunk destination Http Event Collector getting indexed but not displaying in Splunk Apps

I have AWS cloudtrail, vpc flow logs and cloudwatch logs being indexed and are searchable in splunk via kinesis firehose->splunk destination-> HTTP Event collector->index but the splunk app for aws does not display any data How do you configure the splunk app for aws to use this splunk recommended input architecture and display AWS log data? same question for Splunk Enterprise, or Splunk Enterprise Security no show data but a index="aws_vpc_flow_logs" shows all logs? https://www.splunk.com/blog/2018/01/12/power-data-ingestion-into-splunk-using-amazon-kinesis-data-firehose.html