https://community.splunk.com/t5/Getting-Data-In/How-to-filter-out-certain-log-events-before-sending-the-data-to/m-p/258556#M49657 <P>I am using Splunk to send log source data to QRadar and need to find a way to filter out certain unwanted log events. Do you know of a way to filter out unwanted log events? </P> <P>FYI - I am sending the log data to QRadar via our 5 indexers.</P> Thu, 19 May 2016 12:58:20 GMT gharpe2 2016-05-19T12:58:20Z https://community.splunk.com/t5/Getting-Data-In/How-to-filter-out-certain-log-events-before-sending-the-data-to/m-p/258556#M49657 <P>I am using Splunk to send log source data to QRadar and need to find a way to filter out certain unwanted log events. Do you know of a way to filter out unwanted log events? </P> <P>FYI - I am sending the log data to QRadar via our 5 indexers.</P> Thu, 19 May 2016 12:58:20 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-filter-out-certain-log-events-before-sending-the-data-to/m-p/258556#M49657 gharpe2 2016-05-19T12:58:20Z https://community.splunk.com/t5/Getting-Data-In/How-to-filter-out-certain-log-events-before-sending-the-data-to/m-p/258557#M49658 <P>Hi,</P> <P>Take a good look at this:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.4.1/Forwarding/Forwarddatatothird-partysystemsd#Forward_a_subset_of_data">http://docs.splunk.com/Documentation/Splunk/6.4.1/Forwarding/Forwarddatatothird-partysystemsd#Forward_a_subset_of_data</A></P> <P>And if you need more information see this other doc too:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.4.1/Forwarding/Routeandfilterdatad">http://docs.splunk.com/Documentation/Splunk/6.4.1/Forwarding/Routeandfilterdatad</A></P> Thu, 19 May 2016 14:22:34 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-filter-out-certain-log-events-before-sending-the-data-to/m-p/258557#M49658 javiergn 2016-05-19T14:22:34Z