Hello, new to splunk. I am trying to exclude certain applications in an SPL search, specifically by app name. What field would I need to consider in order to apply the '!=' boolean plus app name? Thanks again.
What data you have and what search you have so far?