I hate Splunk but this is the fukkin truth. Companies will offer you a boatload of money just to create freaking Dashboards and Queries. I guess paying all that money for a product you want to get some value out of it.Nice, dig into it. Splunk is powerful as hell.
Are you guys using the front end dashboard interface or do they allow you to run ad hoc searches against the splunk indexes?