need the correct spelling of exclude: ./splunk diag --exclude *.data ... View more

Hi Dave, Is this still the same with Splunk 6? It would be great to have a blacklist of indexes to reduce the overhead of maintaining the whitelist. Ideally I'd be able to configure the user role to access all non internal indexes except for specified secure ones. ..marty ... View more