upgraded to Splunk 1.2.0