Intermediate in Splunk