Splunk convert mac address colon to dash