some more tweaks to formatting into splunk