Splunk Search

NOT Like function

athorat
Communicator

I am using this like function in in a pie chart and want to exclude the other values
How do I use NOT Like or id!="%IIT" AND id!="%IIM"

|eval id = case(like(id, "%PAS"),"PAS",like(id, "%SIS"),"SIS",like(id, "%HDES"),"HDES",1=1,id)

Tags (2)

ChrisFontana
Loves-to-Learn Lots

Hey, just use like you wrote before, NOT LIKE. E.g.:

| where NOT LIKE("FIELD_NAME","%TEXT%")

0 Karma

woodcock
Esteemed Legend

You can do this:

Your Search Here | regex fieldName != "RegExHere"

cnoerjadi
Engager

try this

| where !LIKE(foo, "$abc")

raghu0463
Explorer

how to filter for multiple values please i.e

|where !LIKE(foo, "$abc", "xxx", "sss")

0 Karma

nick405060
Motivator

Can someone convert this to the answer?

0 Karma

renjith_nair
Legend

@nick405060 , converted the comment to answer so that it could be accepted as answer.

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...