Splunk query exclude keywords - Splunk Community

Splunk Search

Hi all

i need some help with my splunk query… basically I need to exclude all jobs from output with job name ending in _fw as shown below:

jobname

Abc_token_fw

def_file_fw

Can you try this,

<your_search_goes_here> jobname!="*_fw"

Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl. To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...