what is the syntax for fieldname not equals regex

[alexl1]

hi,
what is the syntax for fieldname not equals regex

thanks,

[lukejadamec]

Let me guess, you want to do a regex on _raw, but you don't want the regex to search one of the fields?

[Ayn · Accepted solution]

... | regex <field>!="<regex>"

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Regex

[alacercogitatus]

Doesn't that mean "field value not equal regex" ?

[somesoni2]

you want to exclude some fields from your output?