To Splunk or not To Splunk