https://community.splunk.com/t5/Splunk-Search/Discarding-of-Events-based-on-some-column-value/m-p/166767#M186161 <P>Please see <A href="http://docs.splunk.com/Documentation/Splunk/6.0.1/Forwarding/Routeandfilterdatad">this</A> </P> <P>You can use regex patterns to match and set that to be dumped to nullQueue. </P> Wed, 26 Feb 2014 18:50:37 GMT theouhuios 2014-02-26T18:50:37Z https://community.splunk.com/t5/Splunk-Search/Discarding-of-Events-based-on-some-column-value/m-p/166766#M186160 <P>Hi,<BR /> I have a JSON file which has a key value pair. I want to discard the events which contains "Name":"John" ( I mean if "Name" column is having "John" value ). The events which contains this "John" name should be discarded or should not be indexed.</P> <P>Please let me know the possible ways !!</P> <P>Regards,<BR /> Abhay</P> Wed, 26 Feb 2014 18:19:24 GMT https://community.splunk.com/t5/Splunk-Search/Discarding-of-Events-based-on-some-column-value/m-p/166766#M186160 abhayneilam 2014-02-26T18:19:24Z https://community.splunk.com/t5/Splunk-Search/Discarding-of-Events-based-on-some-column-value/m-p/166767#M186161 <P>Please see <A href="http://docs.splunk.com/Documentation/Splunk/6.0.1/Forwarding/Routeandfilterdatad">this</A> </P> <P>You can use regex patterns to match and set that to be dumped to nullQueue. </P> Wed, 26 Feb 2014 18:50:37 GMT https://community.splunk.com/t5/Splunk-Search/Discarding-of-Events-based-on-some-column-value/m-p/166767#M186161 theouhuios 2014-02-26T18:50:37Z https://community.splunk.com/t5/Splunk-Search/Discarding-of-Events-based-on-some-column-value/m-p/166768#M186162 <P>Thanks It is now working ..</P> Thu, 27 Feb 2014 08:59:35 GMT https://community.splunk.com/t5/Splunk-Search/Discarding-of-Events-based-on-some-column-value/m-p/166768#M186162 abhayneilam 2014-02-27T08:59:35Z