Splunk Distinct Count