Splunk Search

NOT Like function

athorat
Communicator

I am using this like function in in a pie chart and want to exclude the other values
How do I use NOT Like or id!="%IIT" AND id!="%IIM"

|eval id = case(like(id, "%PAS"),"PAS",like(id, "%SIS"),"SIS",like(id, "%HDES"),"HDES",1=1,id)

Tags (2)

ChrisFontana
Loves-to-Learn Lots

Hey, just use like you wrote before, NOT LIKE. E.g.:

| where NOT LIKE("FIELD_NAME","%TEXT%")

0 Karma

woodcock
Esteemed Legend

You can do this:

Your Search Here | regex fieldName != "RegExHere"

cnoerjadi
Engager

try this

| where !LIKE(foo, "$abc")

raghu0463
Explorer

how to filter for multiple values please i.e

|where !LIKE(foo, "$abc", "xxx", "sss")

0 Karma

nick405060
Motivator

Can someone convert this to the answer?

0 Karma

renjith_nair
Legend

@nick405060 , converted the comment to answer so that it could be accepted as answer.

Happy Splunking!
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...