substr() can be used to get last n characters from a field in Splunk.

Syntax:

| eval customfield=substr( Field, -15 )

Example:

| eval recordId=substr( result, -15 )