Foglight APM (Application Performance Monitoring) is not displaying search hits from the monitored IP addresses but Foglight APM sniffer is able to detect network packets from the monitored IP addresses when 'tcpdump' command is manually issued.
IP addresses to be monitored have to be defined in the Foglight APM sniffer configuration. Please refer to Managing Monitored IP Addresses for detailed instructions to define the IP addresses to be monitored by Foglight APM.