Email Record: Splunk Best Practices /