Search for data that has not been tagged

[sarahw3]

I have just created 71 eventtypes and I want to see if I left any out. In each eventtype I gave it a tag. In the search, is there a way to search for my data that does not have a tag?

[DalJeanis · Accepted solution]

Later in the search it looks like this...

| where isnull(tag)

I believe on the initial search it would be...

 tag!=*

... or ...

NOT tag=*

[sarahw3]

The isnull one worked perfectly! Thank you!