For you first question, see this. Since you're doing multiple remove, SEDCMD is your guy.
http://answers.splunk.com/answers/9456/performance-difference-between-using-sedcmd-and-older-regextransforms-method.
Great job resolving the extra spaces issue. I was getting that too but somehow didn't show when pasted the result here.
... View more