final for splunk demo