splunk challenge 2b