at the moment i do that from within splunk