changes

queryTop, day/week/month, Unknown_User, splunk_end_point