Splunk Interview Question

python data organization coding problem