Splunk implementation