Splunk| Add info on possible modification