ParentFull threadthrownblown·writing splunk queries, they are often wrong but close enough that I can edit it into workingView on HN