some tips about splunk