Adding offset to splunk results