Splunk value writer