downgrade to splunk version 1.1.0