add RUN before splunk start commands