$ 0 0 same query return results on Splunk web interface. ![alt text][1] [1]: /storage/temp/220000-splunk-postmantxt.png