Splunk update