Earliest And Latest In Splunk