host="SPL-SH-DC" sourcetype="csv" source="****"
Severity!="Info"
Severity!="low"
Plugin_Name!="SSL Certificate with Wrong Hostname"
Plugin_Name!="Unix Operating System Unsupported Version Detection"
Plugin_Name!="SSL Self-Signed Certificate"
Plugin_Name!="SSL Certificate Cannot Be Trusted"
Port!="8089"
Port!="6502"
| table IP_Address,device_name,Plugin_Name, Severity,model, Protocol, Port, Exploit, Synopsis, Description, Solution, See_Also, CVSS_V2_Base_Score, CVE,Plugin
Thanks for your help!
The search result is correct. How ever I am looking for a short way writing not equal for the same fields and different values.
Plugin_Name!="A"
Plugin_Name!="B"
Plugin_Name!="C"
Plugin_Name!="D"
I've tried this but it not working.
Plugin_Name !IN (A,B,C,D)
NOT Plugin_Name IN (A,B,C,D)
Hi ITWhisperer,
I got it now. Thanks for your help.
Regards,
Rithekakan
What you have will search for events which are not equal to the values you are trying to exclude. What else are you asking for?