Splunk improvements