Not sure if my comment made it through, but if we're going to catch this with Splunk, we should probably format it in a more l2met or Splunk-friendly way.