The user name and app are populated dynamically from Splunk