Finish Splunk challenge