Update splunk-forwarder.yml