https://community.splunk.com/t5/Getting-Data-In/How-to-make-Filters-on-extracted-fields/m-p/195412#M38869 <P>To filter out search results - you can do it in couple of ways<BR /> 1) Use AND NOT in your search criteria i.e AND NOT user_name=WS*<BR /> 2) To filter out sign_in_date - you can use where cause <BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/CommonEvalFunctions" target="_blank">http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/CommonEvalFunctions</A></P> Tue, 29 Sep 2020 06:36:55 GMT vinitatsky 2020-09-29T06:36:55Z https://community.splunk.com/t5/Getting-Data-In/How-to-make-Filters-on-extracted-fields/m-p/195411#M38868 <P>Hey everybody,</P> <P>i asked a question before and thanks to "Mus"(member here) i got an answer and it works .<BR /> <A href="http://answers.splunk.com/answers/265963/how-to-compare-two-log-files.html#answer-267398" target="_blank">http://answers.splunk.com/answers/265963/how-to-compare-two-log-files.html#answer-267398</A></P> <P>And now what i should to do is to make filter on the fields extracted.<BR /> So, i want to put a filter on the "user_name" So that we extarct those that does not start with "WS" for example, and filter "sing_in_date&lt;08/07/2015 " .. how we can do that ?</P> <P>Thanks again.</P> Tue, 29 Sep 2020 06:36:53 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-make-Filters-on-extracted-fields/m-p/195411#M38868 isedrof 2020-09-29T06:36:53Z https://community.splunk.com/t5/Getting-Data-In/How-to-make-Filters-on-extracted-fields/m-p/195412#M38869 <P>To filter out search results - you can do it in couple of ways<BR /> 1) Use AND NOT in your search criteria i.e AND NOT user_name=WS*<BR /> 2) To filter out sign_in_date - you can use where cause <BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/CommonEvalFunctions" target="_blank">http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/CommonEvalFunctions</A></P> Tue, 29 Sep 2020 06:36:55 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-make-Filters-on-extracted-fields/m-p/195412#M38869 vinitatsky 2020-09-29T06:36:55Z