Oh, he works for Splunk? My initial thought was, "who would choose Splunk for the datastore for anything?" This now makes sense. edit: by "anything", I mean

Oh, he works for Splunk? My initial thought was, "who would choose Splunk for the datastore for anything?" This now makes sense. edit: by "anything", I mean "anything that isn't logs/security event data"