Complete Splunk challenge 1