retrieve data from Splunk