Archive

what is the syntax for fieldname not equals regex

Path Finder

hi,
what is the syntax for fieldname not equals regex

thanks,

Tags (1)
0 Karma
1 Solution

Legend
0 Karma

Super Champion

Let me guess, you want to do a regex on _raw, but you don't want the regex to search one of the fields?

0 Karma

Legend
0 Karma

SplunkTrust
SplunkTrust

Doesn't that mean "field value not equal regex" ?

0 Karma

SplunkTrust
SplunkTrust

you want to exclude some fields from your output?

0 Karma