https://community.splunk.com/t5/Splunk-Dev/Excluding-multiple-and-changing-items-for-a-query-on-Splunk/m-p/306484#M4044 <P>Hello, </P> <P>I'm building a list of "known" IP addresses i want to exclude from a logon log search query (so it essentially just show me logon attempts from non-verified IP addresses) . Is there a way to reference a file i would maintain, in a query to make things easier?</P> <P>I'm on Splunk Cloud</P> <P>Thanks!</P> Fri, 13 Oct 2017 13:42:26 GMT ptur 2017-10-13T13:42:26Z https://community.splunk.com/t5/Splunk-Dev/Excluding-multiple-and-changing-items-for-a-query-on-Splunk/m-p/306484#M4044 <P>Hello, </P> <P>I'm building a list of "known" IP addresses i want to exclude from a logon log search query (so it essentially just show me logon attempts from non-verified IP addresses) . Is there a way to reference a file i would maintain, in a query to make things easier?</P> <P>I'm on Splunk Cloud</P> <P>Thanks!</P> Fri, 13 Oct 2017 13:42:26 GMT https://community.splunk.com/t5/Splunk-Dev/Excluding-multiple-and-changing-items-for-a-query-on-Splunk/m-p/306484#M4044 ptur 2017-10-13T13:42:26Z https://community.splunk.com/t5/Splunk-Dev/Excluding-multiple-and-changing-items-for-a-query-on-Splunk/m-p/306485#M4045 <P>did some searching, uploading lookup table and using inputlookup command did the trick!</P> Fri, 13 Oct 2017 16:50:10 GMT https://community.splunk.com/t5/Splunk-Dev/Excluding-multiple-and-changing-items-for-a-query-on-Splunk/m-p/306485#M4045 ptur 2017-10-13T16:50:10Z