Getting Data In

Exclude words from subject

priya0709
Path Finder

I have to exclude all subject with some similar set of words in subject.

Eg. Inc00452| RE: Exchange 2K16: Alert: Processor > % Processor Time

So I have to exclude all subject with 'Alert: Processor > % Processor Time'

So all subject with above keyword should be excluded

 

Labels (1)
0 Karma

dauren_akilbeko
Communicator
0 Karma

inventsekar
Super Champion

Hi @priya0709 your question is not clear.. please provide us some more details, thanks. 

PS ... If any post helped you in any way, pls give a hi-five to the author with an upvote. if your issue got resolved, please accept the reply as solution.. thanks.
0 Karma

priya0709
Path Finder

My requirement is to exclude all subjects which has words "Alert: Processor > % Processor Time" in subject

Please see attached my query

0 Karma

inventsekar
Super Champion

Hi Priya, you were saying about logs ingestion at HF and filtering at HF?

or you were saying about the "alerts" email notification subject line? 

 

Maybe, You could send a direct message here from your profile to me, so that we can understand and resolve your issue faster, thanks. 

PS ... If any post helped you in any way, pls give a hi-five to the author with an upvote. if your issue got resolved, please accept the reply as solution.. thanks.
0 Karma

priya0709
Path Finder

Please see attached

0 Karma

isoutamo
SplunkTrust
SplunkTrust
Are you meaning that this text will removed:
- your query output
- already from events before it has stored to splunk
- something else
r. Ismo
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...