Splunk interview question

Process input string as needed