added a template and a definition to the splunk cookbook