splunk is moving towards preferring colons in sourcetype delimiters (#5338)
splunk is moving towards preferring colons in sourcetype delimiters (#5338)

Summary:
Just a minor cosmetic change on docs, that changes the Splunk's sourcetype names to have colons instead of underscore as it is the preferred method for delimiting sourcetypes. Not sure if a test is needed for this actual docs change.
Pull Request resolved: https://github.com/facebook/osquery/pull/5338

Differential Revision: D13607572

Pulled By: fmanco

fbshipit-source-id: 95f255fb91b821b602a89c9dda3501fdba10fd1b

hackgnar/osquery,hackgnar/osquery,hackgnar/osquery