It's not an issue but rather a question/request. Currently, with the following config:  in Splunk it is displayed like:  Is it possible to configure it so that it displays like this? 