Splunk config recipe

update variables with syntax errors