https://community.splunk.com/t5/Security/How-can-I-blacklist-logs-from-a-source/m-p/353428#M12566 <P>We are monitoring logs from the below path </P> <P>[monitor:///opt/IBMHTTPD85/IHS/.../*]</P> <P>I want to blacklist all logs from source,</P> <P>source="/opt/IBMHTTPD85/IHS/logsPRD2/wm_ssl_access_log"</P> <P>How can I achieve this in the inputs.conf file?</P> Tue, 29 Sep 2020 13:52:03 GMT ppanchal 2020-09-29T13:52:03Z https://community.splunk.com/t5/Security/How-can-I-blacklist-logs-from-a-source/m-p/353428#M12566 <P>We are monitoring logs from the below path </P> <P>[monitor:///opt/IBMHTTPD85/IHS/.../*]</P> <P>I want to blacklist all logs from source,</P> <P>source="/opt/IBMHTTPD85/IHS/logsPRD2/wm_ssl_access_log"</P> <P>How can I achieve this in the inputs.conf file?</P> Tue, 29 Sep 2020 13:52:03 GMT https://community.splunk.com/t5/Security/How-can-I-blacklist-logs-from-a-source/m-p/353428#M12566 ppanchal 2020-09-29T13:52:03Z https://community.splunk.com/t5/Security/How-can-I-blacklist-logs-from-a-source/m-p/353429#M12567 <P>Add -</P> <PRE><CODE>blacklist = (^/opt/IBMHTTPD85/IHS/logsPRD2/wm_ssl_access_log$) </CODE></PRE> Fri, 28 Apr 2017 07:02:42 GMT https://community.splunk.com/t5/Security/How-can-I-blacklist-logs-from-a-source/m-p/353429#M12567 dineshraj9 2017-04-28T07:02:42Z https://community.splunk.com/t5/Security/How-can-I-blacklist-logs-from-a-source/m-p/353430#M12568 <P>This did not work, I am still seeing the logs from the source.</P> <P>Any other suggestions?</P> Fri, 28 Apr 2017 17:51:58 GMT https://community.splunk.com/t5/Security/How-can-I-blacklist-logs-from-a-source/m-p/353430#M12568 ppanchal 2017-04-28T17:51:58Z https://community.splunk.com/t5/Security/How-can-I-blacklist-logs-from-a-source/m-p/353431#M12569 <P>Can I directly write the path instead of using regular expressions under blacklist?</P> Sat, 29 Apr 2017 22:50:18 GMT https://community.splunk.com/t5/Security/How-can-I-blacklist-logs-from-a-source/m-p/353431#M12569 ppanchal 2017-04-29T22:50:18Z