Splunk Regex Replace Part Of String