https://community.splunk.com/t5/Splunk-Search/Accuracy-of-metadata-command-in-large-environments/m-p/167649