Explanation/Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/definecalcfields

Explanation
The tag=Priv* search will return events containing a tag named Privileged, as well as any other tag that starts with Priv. The asterisk (*) is a wildcard character that matches zero or more characters. The other searches will not match the exact tag name.

Stacked charts represent a series in a single bar with multiple sections. A chart is a graphical representation of
data that shows trends, patterns, or comparisons. A chart can have different types, such as column, bar, line,
area, pie, etc. A chart can also have different modes, such as split-series, multi-series, stacked, etc. A stacked
chart is a type of chart that shows multiple series in a single bar or area with different sections for each series