Change Data Model Splunk