Documentation update

Signed-off-by: David Noble <dnoble@splunk.com>