Splunk Enterprise

How to restrict particular month?

Keerthi
Path Finder

Keerthi_0-1684494919100.png


Hi ,

I have to restrict 2023-05 date field . This is used as filter in the dashboard. Can some one help me provide the command for the requirement. 

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
| where time!="2023-05"

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| where time="2023-05"
0 Karma

Keerthi
Path Finder

sir, i dont need this date  "2023-05" and i need rest of other dates

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| where time!="2023-05"
0 Karma

Keerthi
Path Finder

Thanks for your timely help sir!!!!

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...