I have a clob field that I don't want to index in full, is there a way to manipulate a splunkdb input before the contents are sent to indexing? Or does this have to be done in the query?