Splunk lookup update + new webfaup lookup to use the faup webserice