http://www.cfenginetutorial.org/book/cfengine_250#uid131
Also, it contains the long process table regex for a splunkd process, which I am pretty sure is based on the older processes promises implementation - need to dig up the details, but as I recall there was an improvement to that so that the regex is only matched against the actual process name (or full command?).