https://community.splunk.com/t5/Getting-Data-In/Splunk-search-using-csv-file-as-whitelist-for-ip-addresses/m-p/84587#M17578 <P>Is there a way to use a file instead of entering ip's when wanting to exclude ranges of ip's from a search, such as NOT <FILENAME> instead of NOT (1.1.1.* OR 1.2.1.* OR 1.1.2.3) I'm trying to exclude known good ip's from a search in order to see possible interesting traffic without having to type them into the search by just updating a file instead.</FILENAME></P> Thu, 04 Apr 2013 12:37:36 GMT rchiii 2013-04-04T12:37:36Z https://community.splunk.com/t5/Getting-Data-In/Splunk-search-using-csv-file-as-whitelist-for-ip-addresses/m-p/84587#M17578 <P>Is there a way to use a file instead of entering ip's when wanting to exclude ranges of ip's from a search, such as NOT <FILENAME> instead of NOT (1.1.1.* OR 1.2.1.* OR 1.1.2.3) I'm trying to exclude known good ip's from a search in order to see possible interesting traffic without having to type them into the search by just updating a file instead.</FILENAME></P> Thu, 04 Apr 2013 12:37:36 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-search-using-csv-file-as-whitelist-for-ip-addresses/m-p/84587#M17578 rchiii 2013-04-04T12:37:36Z https://community.splunk.com/t5/Getting-Data-In/Splunk-search-using-csv-file-as-whitelist-for-ip-addresses/m-p/84588#M17579 <P>you can list all your IP that you want to white lsit in CSV file then run your search againest that file </P> <P>eg</P> <P>tag=traffic NOT [|inputcsv rchiii_whitelist_IP.csv ]</P> <P>good luck</P> Tue, 29 Sep 2020 09:42:06 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-search-using-csv-file-as-whitelist-for-ip-addresses/m-p/84588#M17579 mosman_splunk 2020-09-29T09:42:06Z