Splunk Add Total Column