<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Exclude from index in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Exclude-from-index/m-p/29508#M177950</link>
    <description>&lt;P&gt;I have a ton of event that contain SourceName="Symantec AntiVirus". How can I exclude these events fro being indexed?&lt;/P&gt;</description>
    <pubDate>Tue, 12 Feb 2013 23:00:26 GMT</pubDate>
    <dc:creator>MBerikcurtis</dc:creator>
    <dc:date>2013-02-12T23:00:26Z</dc:date>
    <item>
      <title>Exclude from index</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Exclude-from-index/m-p/29508#M177950</link>
      <description>&lt;P&gt;I have a ton of event that contain SourceName="Symantec AntiVirus". How can I exclude these events fro being indexed?&lt;/P&gt;</description>
      <pubDate>Tue, 12 Feb 2013 23:00:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Exclude-from-index/m-p/29508#M177950</guid>
      <dc:creator>MBerikcurtis</dc:creator>
      <dc:date>2013-02-12T23:00:26Z</dc:date>
    </item>
    <item>
      <title>Re: Exclude from index</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Exclude-from-index/m-p/29509#M177951</link>
      <description>&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/5.0.2/Deploy/Routeandfilterdatad#Discard_specific_events_and_keep_the_rest"&gt;http://docs.splunk.com/Documentation/Splunk/5.0.2/Deploy/Routeandfilterdatad#Discard_specific_events_and_keep_the_rest&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 12 Feb 2013 23:31:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Exclude-from-index/m-p/29509#M177951</guid>
      <dc:creator>Ayn</dc:creator>
      <dc:date>2013-02-12T23:31:27Z</dc:date>
    </item>
  </channel>
</rss>

