changing separator back to comma since Splunk did not like the tabs