dir for Splunk app