Couple of questions
not sure what the context of your questions but let me try ...
1. why send to a forwarder? you can search data that is indexed in the indexer, this is the place for data, like a nest for an egg.
2. you have so many windows metrics that i am doubtful if you'll ever use them all. on top of that, each metric has many many counters. yes, they are in a drop-down menu if you install the TA on a full Splunk instance. remember that a forwarder does not have GUI. here is how to see all the metrics and all the counters possible in Windows TA click settings (top right) -> data inputs -> local performance monitoring -> New Local Performance Monitor -> enjoy the drop-down option -> enjoy picking performance counters
3. what do you mean by "polling"?
4. probably because you didnt tell splunk to collect those metrics, or because you are not searching in the right place.
hope it helps