Deployment Architecture

How could I exclude a browser (firefox, etc.), email, or file transfer application from an SPL search?

Domingmr
New Member

Hello, new to splunk. I am trying to exclude certain applications in an SPL search, specifically by app name.  What field would I need to consider in order to apply the '!=' boolean plus app name? Thanks again.

Labels (2)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

What data you have and what search you have so far?

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...