Splunk Search

what is the syntax for fieldname not equals regex

alexl1
Path Finder

hi,
what is the syntax for fieldname not equals regex

thanks,

Tags (1)
0 Karma
1 Solution

Ayn
Legend
0 Karma

lukejadamec
Super Champion

Let me guess, you want to do a regex on _raw, but you don't want the regex to search one of the fields?

0 Karma

Ayn
Legend
0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Doesn't that mean "field value not equal regex" ?

0 Karma

somesoni2
Revered Legend

you want to exclude some fields from your output?

0 Karma
Get Updates on the Splunk Community!

Get Operational Insights Quickly with Natural Language on the Splunk Platform

In today’s fast-paced digital world, turning data into actionable insights is essential for success. With ...

What’s New in Splunk Observability Cloud – June 2025

What’s New in Splunk Observability Cloud – June 2025 We are excited to announce the latest enhancements to ...

Almost Too Eventful Assurance: Part 2

Work While You SleepBefore you can rely on any autonomous remediation measures, you need to close the loop ...