Update splunk.yml