splunk challenge 2a