added tcp/9997

splunk management