Splunk inputs for Linux forwarder