Splunk interview question

What would you do differently