Splunk Reference App - Pluggable Auditing System (PAS) - Code Repo - View it on GitHub