Change default db_directory for splunk

Most *nix programs put their databases into /var/db.

Custom locations can be overridden with override attributes in chef,
or a symlink.