Generating query substitutions