added splunkforwarder cookbook