fix buffer path
changed kibana article to more splunk-oriented story