Add port forward for splunk