this is now correctly reformatting data so that it can be fed into splunk