splunk challenge 1