Splunk configuration - tagging centralised logs with the app/markdown content name

[atheriel]

We have open-sourced an in-house solution for exactly this issue -- forwardings logs to Splunk. Forum post is here: Announcing a way to forward logs from RSConnect to Elasticsearch, Splunk, and many others