Splunk Running On Empty