Splunk 18 - Intermediate Searching