use absolute path to get rid of broken splunk stanza expansion