fixing issue with splunk search earliest option was not working