Splunk config recipe

merge of changes