https://community.splunk.com/t5/Splunk-Search/How-to-query-a-string-log-value-based-on-another-string-value/m-p/130751#M35630 <P>Are you looking for a query to search for one string and ensure that other string is not found? If yes then try something like this</P> <P>source=yoursource "string1Val" NOT "string2Val"</P> Mon, 14 Apr 2014 16:39:38 GMT somesoni2 2014-04-14T16:39:38Z https://community.splunk.com/t5/Splunk-Search/How-to-query-a-string-log-value-based-on-another-string-value/m-p/130750#M35629 <P>How can I query for string1val but make sure that stringval2!=0?</P> <P>I tried something like this but new to splunk.</P> <P>source=*/thelog.log stringVal1=0 where stringVal2!=0 | stats count</P> Mon, 14 Apr 2014 16:29:31 GMT https://community.splunk.com/t5/Splunk-Search/How-to-query-a-string-log-value-based-on-another-string-value/m-p/130750#M35629 jaj 2014-04-14T16:29:31Z https://community.splunk.com/t5/Splunk-Search/How-to-query-a-string-log-value-based-on-another-string-value/m-p/130751#M35630 <P>Are you looking for a query to search for one string and ensure that other string is not found? If yes then try something like this</P> <P>source=yoursource "string1Val" NOT "string2Val"</P> Mon, 14 Apr 2014 16:39:38 GMT https://community.splunk.com/t5/Splunk-Search/How-to-query-a-string-log-value-based-on-another-string-value/m-p/130751#M35630 somesoni2 2014-04-14T16:39:38Z https://community.splunk.com/t5/Splunk-Search/How-to-query-a-string-log-value-based-on-another-string-value/m-p/130752#M35631 <PRE><CODE>source=*/thelog.log (stringVal1=0 AND stringVal2!=0) | stats count </CODE></PRE> Mon, 14 Apr 2014 16:54:08 GMT https://community.splunk.com/t5/Splunk-Search/How-to-query-a-string-log-value-based-on-another-string-value/m-p/130752#M35631 linu1988 2014-04-14T16:54:08Z