topic Re: how to avoid displaying the field which contains #? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/how-to-avoid-displaying-the-field-which-contains/m-p/324239#M60360 <P>Here's one way.</P> <PRE><CODE>base search | regex acts!="#" | table acts </CODE></PRE> Thu, 23 Feb 2017 19:40:04 GMT richgalloway 2017-02-23T19:40:04Z how to avoid displaying the field which contains #? https://community.splunk.com/t5/Getting-Data-In/how-to-avoid-displaying-the-field-which-contains/m-p/324237#M60358 <P>Hi have a field named acts which displays all the different acts with below query</P> <P>base search | table acts</P> <P>which displays as below</P> <P>displayed screen<BR /> 113;screen</P> <H1>kjhkh;jkh</H1> <P>hjgjh#kjhk<BR /> jhgjhyg#</P> <P>Now I dont want to display any of the results which contains # in it. How can I filter them?</P> Thu, 23 Feb 2017 19:21:47 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-avoid-displaying-the-field-which-contains/m-p/324237#M60358 pavanae 2017-02-23T19:21:47Z Re: how to avoid displaying the field which contains #? https://community.splunk.com/t5/Getting-Data-In/how-to-avoid-displaying-the-field-which-contains/m-p/324238#M60359 <P>Try like this</P> <PRE><CODE>base search | table acts | eval acts=mvfilter(NOT match(acts,"#")) </CODE></PRE> Thu, 23 Feb 2017 19:36:22 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-avoid-displaying-the-field-which-contains/m-p/324238#M60359 somesoni2 2017-02-23T19:36:22Z Re: how to avoid displaying the field which contains #? https://community.splunk.com/t5/Getting-Data-In/how-to-avoid-displaying-the-field-which-contains/m-p/324239#M60360 <P>Here's one way.</P> <PRE><CODE>base search | regex acts!="#" | table acts </CODE></PRE> Thu, 23 Feb 2017 19:40:04 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-avoid-displaying-the-field-which-contains/m-p/324239#M60360 richgalloway 2017-02-23T19:40:04Z Re: how to avoid displaying the field which contains #? https://community.splunk.com/t5/Getting-Data-In/how-to-avoid-displaying-the-field-which-contains/m-p/324240#M60361 <P>If acts is one of your extracted fields you can filter the same in the base search itself</P> <PRE><CODE>&lt;Your Base Search&gt; acts!="*#*" | table acts </CODE></PRE> Thu, 23 Feb 2017 19:53:22 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-avoid-displaying-the-field-which-contains/m-p/324240#M60361 niketn 2017-02-23T19:53:22Z