Splunk Interview Question

merge overlapping intervals