for extract errs from splunk
add load yaml