change the default value of source to "{TAG}"
add parameter 'time_format'
add support for Splunk REST API