https://community.splunk.com/t5/Getting-Data-In/Need-to-Add-blacklist-except-amp-quot-string-amp-quot-is/m-p/548422#M91188 <P>Splunk calls that "filtering".&nbsp; See&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/8.1.3/Forwarding/Routeandfilterdatad#Filter_event_data_and_send_to_queues" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.1.3/Forwarding/Routeandfilterdatad#Filter_event_data_and_send_to_queues</A>&nbsp;and&nbsp;<A href="https://community.splunk.com/t5/Getting-Data-In/Filtering-events-using-NullQueue/m-p/66392" target="_blank">https://community.splunk.com/t5/Getting-Data-In/Filtering-events-using-NullQueue/m-p/66392</A></P> Mon, 19 Apr 2021 12:55:43 GMT richgalloway 2021-04-19T12:55:43Z https://community.splunk.com/t5/Getting-Data-In/Need-to-Add-blacklist-except-amp-quot-string-amp-quot-is/m-p/547862#M91143 <P>Need to Add blacklist except "*string*" is possible ?</P> Wed, 14 Apr 2021 09:48:56 GMT https://community.splunk.com/t5/Getting-Data-In/Need-to-Add-blacklist-except-amp-quot-string-amp-quot-is/m-p/547862#M91143 Kathir 2021-04-14T09:48:56Z https://community.splunk.com/t5/Getting-Data-In/Need-to-Add-blacklist-except-amp-quot-string-amp-quot-is/m-p/547889#M91145 <P>To what do you want to add this blacklist?&nbsp; Please describe the problem fully.</P> Wed, 14 Apr 2021 12:26:19 GMT https://community.splunk.com/t5/Getting-Data-In/Need-to-Add-blacklist-except-amp-quot-string-amp-quot-is/m-p/547889#M91145 richgalloway 2021-04-14T12:26:19Z https://community.splunk.com/t5/Getting-Data-In/Need-to-Add-blacklist-except-amp-quot-string-amp-quot-is/m-p/548391#M91182 <P>in our logfile we have many of the content we want blacklist with keywords&nbsp;</P><P>list "some test,sometext1,sometext2,"&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 19 Apr 2021 07:45:43 GMT https://community.splunk.com/t5/Getting-Data-In/Need-to-Add-blacklist-except-amp-quot-string-amp-quot-is/m-p/548391#M91182 Kathir 2021-04-19T07:45:43Z https://community.splunk.com/t5/Getting-Data-In/Need-to-Add-blacklist-except-amp-quot-string-amp-quot-is/m-p/548422#M91188 <P>Splunk calls that "filtering".&nbsp; See&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/8.1.3/Forwarding/Routeandfilterdatad#Filter_event_data_and_send_to_queues" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.1.3/Forwarding/Routeandfilterdatad#Filter_event_data_and_send_to_queues</A>&nbsp;and&nbsp;<A href="https://community.splunk.com/t5/Getting-Data-In/Filtering-events-using-NullQueue/m-p/66392" target="_blank">https://community.splunk.com/t5/Getting-Data-In/Filtering-events-using-NullQueue/m-p/66392</A></P> Mon, 19 Apr 2021 12:55:43 GMT https://community.splunk.com/t5/Getting-Data-In/Need-to-Add-blacklist-except-amp-quot-string-amp-quot-is/m-p/548422#M91188 richgalloway 2021-04-19T12:55:43Z