Splunk instructions