splunk: initial intregration