[thrownblown]

writing splunk queries, they are often wrong but close enough that I can edit it into working

[jcims]

I was just wondering about this the other day, glad to see it's got some capability there.