Want to show what apps have been deployed to forwarders from a deployment server (DS)? Try this Splunk Search:

index=_internal sourcetype=splunkd component=DeployedApplication installing 
| stats count latest(_time) AS latest_time by host app 
| convert ctime(latest_time)