Change: Fix splunk forwarder sketch
These changes make the splunk sketch enterprise compatible.
The inputs template has also been improved with regard to CFEngine log
files.
Merge pull request #387 from nickanderson/fix/splunk

splunk: enterprise_compatible and fixes