Removed warum data and replaced it with Splunk default commands.
Converted data with json_rows. Used Splunk default fields for the example.