https://community.splunk.com/t5/Getting-Data-In/WinNetMon-Blacklist-RemoteHostName/m-p/530263#M89278 <P>Is it possible to not ingest logs related to a specific RemoteHostName? I have tried:</P><P>[WinNetMon://winnetmon]</P><P>...</P><P>blacklist = RemoteHostName = "server1.company.org", "server2.company.org"</P> Fri, 20 Nov 2020 20:43:31 GMT mdonovan 2020-11-20T20:43:31Z https://community.splunk.com/t5/Getting-Data-In/WinNetMon-Blacklist-RemoteHostName/m-p/530263#M89278 <P>Is it possible to not ingest logs related to a specific RemoteHostName? I have tried:</P><P>[WinNetMon://winnetmon]</P><P>...</P><P>blacklist = RemoteHostName = "server1.company.org", "server2.company.org"</P> Fri, 20 Nov 2020 20:43:31 GMT https://community.splunk.com/t5/Getting-Data-In/WinNetMon-Blacklist-RemoteHostName/m-p/530263#M89278 mdonovan 2020-11-20T20:43:31Z