Splunk monitor