A while back I had a conversation with someone on setting up OS Puppet -> Splunk. I'm half-heartedly trying it again, translating the PE instructions to the relevant YAML, etc. but it'd be handier (maybe?) to revisit what I did and failed to document for myself.