topic Re: NOT Like function in Splunk Search

NOT Like function

athorat — Sat, 16 Jan 2016 04:11:19 GMT

I am using this like function in in a pie chart and want to exclude the other values
How do I use NOT Like or id!="%IIT" AND id!="%IIM"

|eval id = case(like(id, "%PAS"),"PAS",like(id, "%SIS"),"SIS",like(id, "%HDES"),"HDES",1=1,id)

cnoerjadi — Thu, 25 Jan 2018 19:50:21 GMT

try this

| where !LIKE(foo, "$abc")

nick405060 — Wed, 26 Sep 2018 17:13:48 GMT

Can someone convert this to the answer?

renjith_nair — Thu, 27 Sep 2018 03:37:13 GMT

@nick405060 , converted the comment to answer so that it could be accepted as answer.

raghu0463 — Mon, 11 Nov 2019 21:08:31 GMT

how to filter for multiple values please i.e

|where !LIKE(foo, "$abc", "xxx", "sss")

woodcock — Tue, 12 Nov 2019 01:49:36 GMT

You can do this:

Your Search Here | regex fieldName != "RegExHere"

ChrisFontana — Fri, 09 Oct 2020 13:43:10 GMT

Hey, just use like you wrote before, NOT LIKE. E.g.:

| where NOT LIKE("FIELD_NAME","%TEXT%")