Added more details on how to configure Splunk

Since port 9997 won't necessarily work out of the box, setting up a new TCP data input in Splunk for fluentd is the best solution.