add lesson splunk