splunk spl - exclude multiple values

[iherb_0718]

Hello 

I have this query that works to exclude IP 5.5.5.5 from the list.

index=blah event.ts_detail=*blahblah* event.src_ip!=5.5.5.5

Now I want to also exclude 5.5.5.6.  What would I append to the syntax to accomplish this?
Basically, if the event.src_IP is 5.5.5.5 OR 5.5.5.6 I don't want it to trigger this alert. 

[to4kawa · Accepted solution]

index=blah event.ts_detail=*blahblah* NOT (event.src_ip IN ("5.5.5.5","5.5.5.6"))

e.g. https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Search#Comparison_expression_opt...