Splunk 6.0 keywords and constants