Text this: Splunk Best Practices /