Splunk Get Sum Of Column