@VardhanI'm a huge fan of hurricanelabs and the link you've noted was extremely helpful before I've even posted this. On may of the other splunk documentation, there's a comment section for posting questions. in this case there wasn't.
@gjanders, thanks for your comment below. i completely missed that detail. I'll do that now.