Update docs (#15701)

Update data forwarding section of docs for Splunk 

## IS YOUR CHANGE URGENT?  

Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+

## PRE-MERGE CHECKLIST

*Make sure you've checked the following before merging your changes:*

- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)

---------

Co-authored-by: Irene Liu <[email protected]>

Author: liuirene256

docs/organization/integrations/data-visualization/splunk/img/splunk-data-forwarding-setting-complete.png

@@ -93,9 +93,9 @@ In Sentry, navigate to the project you want to forward events from, and click "P
 
 ### Data Forwarding
 
-Configure [data forwarding](/concepts/data-management/data-forwarding/) in **[Project] > Settings > Data Forwarding**, and provide the required information for the given integration.
+Configure [data forwarding](/organization/integrations/data-forwarding) in **[Organization] > Settings > Data Forwarding**.
 
-After navigating to **Data Forwarding**, enable the Splunk integration:
+After navigating to **Data Forwarding**, setup a new forwarder for the Splunk integration:
 
 ![Data forwarding settings page](./img/splunk-data-forwarding-setting.png)
 
@@ -113,11 +113,11 @@ https://http-inputs-<host>:8088
 
 If you’re using Splunk behind your firewall, you’ll need to fill in the appropriate host.
 
-Once you’ve filled in the required fields, hit **Save Changes**:
+Once you’ve filled in the required fields and added the projects you want to enable splunk for, hit **Complete Setup**:
 
 ![Splunk settings form](./img/splunk-data-forwarding-setting-complete.png)
 
-We’ll now begin forwarding all new events into your Splunk instance.
+We’ll now begin forwarding all new events into your Splunk instance. You can enroll more projects by hitting **Edit** and adding more projects to Forwarding projects.
 
 <Alert>