Lets assume you have the following search:
index=usgs_* source=usgs place=*California | table time, place, mag, depth
And your output is something like:
1/1/2014 San Francisco 4.5 1000m
1/2/2014 Oakland 3.8 500m
1/3/2014 San Jose 3.7 750m
If I wanted to ignore every "Oakland" entry in the table output, how would I do that?
Thanks,
Give this a shot:
index=usgs_* source=usgs place=*California NOT place=Oakland | table time place mag depth
Give this a shot:
index=usgs_* source=usgs place=*California NOT place=Oakland | table time place mag depth
Thanks. Brain fart.. 🙂