Users being followed by Splunk