https://community.splunk.com/t5/Splunk-Search/How-to-search-all-indexes-except-for-a-particular-few/m-p/268168#M80672 <P>Is there a way to search in all indexes except for a couple? <BR /> An example is I have about 100 index but don't want to search for sea1, sea2, sea3, sea4<BR /> Ex. index=* (not sea1, sea2, sea3, sea4) &lt;<CODE>keyword</CODE>&gt;</P> <P>Thank You</P> Wed, 03 Feb 2016 18:36:26 GMT rewritex 2016-02-03T18:36:26Z https://community.splunk.com/t5/Splunk-Search/How-to-search-all-indexes-except-for-a-particular-few/m-p/268168#M80672 <P>Is there a way to search in all indexes except for a couple? <BR /> An example is I have about 100 index but don't want to search for sea1, sea2, sea3, sea4<BR /> Ex. index=* (not sea1, sea2, sea3, sea4) &lt;<CODE>keyword</CODE>&gt;</P> <P>Thank You</P> Wed, 03 Feb 2016 18:36:26 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-all-indexes-except-for-a-particular-few/m-p/268168#M80672 rewritex 2016-02-03T18:36:26Z https://community.splunk.com/t5/Splunk-Search/How-to-search-all-indexes-except-for-a-particular-few/m-p/268169#M80673 <P>Try this.</P> <PRE><CODE>index=* NOT (index=sea1 OR index=sea2 OR index=sea3 OR index=sea4) ... </CODE></PRE> Wed, 03 Feb 2016 18:59:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-all-indexes-except-for-a-particular-few/m-p/268169#M80673 richgalloway 2016-02-03T18:59:17Z https://community.splunk.com/t5/Splunk-Search/How-to-search-all-indexes-except-for-a-particular-few/m-p/268170#M80674 <P>Worked! Thank you...</P> Wed, 03 Feb 2016 19:10:16 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-all-indexes-except-for-a-particular-few/m-p/268170#M80674 rewritex 2016-02-03T19:10:16Z https://community.splunk.com/t5/Splunk-Search/How-to-search-all-indexes-except-for-a-particular-few/m-p/268171#M80675 <P>Hi @rewritex</P> <P>Glad you were able to find the solution you needed through @richgalloway <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> In addition to upvoting the user that helped you, always remember to resolve your posts by clicking "Accept" directly below the answer that solved your question. This will make it easier to find for other users with similar issues. Thanks!</P> Wed, 03 Feb 2016 19:15:15 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-all-indexes-except-for-a-particular-few/m-p/268171#M80675 ppablo 2016-02-03T19:15:15Z