Splunk Create Data Entry