Incorporated QE review

Author: hmanwani-rh

modules/observe/proc-forward-audit-log-splunk.adoc

@@ -52,6 +52,21 @@ oc -n openshift-logging create secret generic splunk-secret --from-literal=hecTo
 oc -n openshift-logging get secret/splunk-secret -o yaml
 ----
 --
+. Create a basic `ClusterLogForwarder`resource YAML file as follows:
++
+--
+.Example `ClusterLogForwarder`resource YAML file
+[source,yaml]
+----
+apiVersion: logging.openshift.io/v1
+kind: ClusterLogForwarder
+metadata:
+  name: instance
+  namespace: openshift-logging
+----
+
+For more information, see link:https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/logging/index#logging-create-clf_configuring-log-forwarding[Creating a log forwarder].
+--
 . Define the following `ClusterLogForwarder` configuration using OpenShift web console or OpenShift CLI:
 .. Specify the `log-collector` as `serviceAccount` in the YAML file:
 +