Refactor direct forwarder

Rewrite the requiring logic, update formatting and remove useless
exec/definitions using Service['splunk']