some scripts for splunk