Feanil/splunk role

@e0d @jarv @jbau @jrbl 

This PR adds a splunk role.  I had to make some permission updates so that various log folders now belong to group 'syslog' instead of 'adm'  not sure if this will break any of the Stanford logging setup.