removing white-space between ext_id_tag and ext_id for Splunk