Querying Splunk via REST