According to Splunk best practices, which placement of the wildcard results in the most efficient search?

{} [+]