there a few things that will be challenging with splunk, mostly to do with tracking changes... but we also use NNT change tracker. I don't think this won't cover all our nodes, as far as I know.