Process events with ingest-time eval - Splunk Documentation