Lets assume you have the following search:
index=usgs_* source=usgs place=*California | table time, place, mag, depth
And your output is something like:
1/1/2014  San Francisco 4.5 1000m
1/2/2014  Oakland 3.8 500m
1/3/2014  San Jose 3.7 750m
If I wanted to ignore every "Oakland" entry in the table output, how would I do that?
Thanks,
 
		
		
		
		
		
	
			
		
		
			
					
		Give this a shot:
index=usgs_* source=usgs place=*California NOT place=Oakland | table time place mag depth
 
		
		
		
		
		
	
			
		
		
			
					
		Give this a shot:
index=usgs_* source=usgs place=*California NOT place=Oakland | table time place mag depth
Thanks. Brain fart.. 🙂
