Definition of Splunk knowledge