Fix specs for splunk stop support