<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Pivot FILTER exclude quotation mark character in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Pivot-FILTER-exclude-quotation-mark-character/m-p/378001#M68362</link>
    <description>&lt;P&gt;Hello Team,&lt;/P&gt;

&lt;P&gt;I do have a pivot:&lt;/P&gt;

&lt;P&gt;| pivot xxxxx RootObject count(RootObject) AS "Count of admin_&lt;EM&gt;admin&lt;/EM&gt;&lt;EM&gt;search&lt;/EM&gt;_RMD578e1308ec259874c_at_1525123982_13769" SPLITROW User AS User FILTER User doesNotContain 'mmm' SORT 100 User ROWSUMMARY 0 COLSUMMARY 0 SHOWOTHER 1&lt;/P&gt;

&lt;P&gt;I am using FILTER command to exclude all usernames which include mmm.&lt;BR /&gt;
But i need to exclude usernames which include quotation mark character: "&lt;/P&gt;

&lt;P&gt;How to do that ?&lt;/P&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
Michal&lt;/P&gt;</description>
    <pubDate>Tue, 29 Sep 2020 19:23:16 GMT</pubDate>
    <dc:creator>teknet9</dc:creator>
    <dc:date>2020-09-29T19:23:16Z</dc:date>
    <item>
      <title>Pivot FILTER exclude quotation mark character</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Pivot-FILTER-exclude-quotation-mark-character/m-p/378001#M68362</link>
      <description>&lt;P&gt;Hello Team,&lt;/P&gt;

&lt;P&gt;I do have a pivot:&lt;/P&gt;

&lt;P&gt;| pivot xxxxx RootObject count(RootObject) AS "Count of admin_&lt;EM&gt;admin&lt;/EM&gt;&lt;EM&gt;search&lt;/EM&gt;_RMD578e1308ec259874c_at_1525123982_13769" SPLITROW User AS User FILTER User doesNotContain 'mmm' SORT 100 User ROWSUMMARY 0 COLSUMMARY 0 SHOWOTHER 1&lt;/P&gt;

&lt;P&gt;I am using FILTER command to exclude all usernames which include mmm.&lt;BR /&gt;
But i need to exclude usernames which include quotation mark character: "&lt;/P&gt;

&lt;P&gt;How to do that ?&lt;/P&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
Michal&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 19:23:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Pivot-FILTER-exclude-quotation-mark-character/m-p/378001#M68362</guid>
      <dc:creator>teknet9</dc:creator>
      <dc:date>2020-09-29T19:23:16Z</dc:date>
    </item>
  </channel>
</rss>

