Hi, I am using Splunk to grab disk drive metrics but often times I am pulling metrics for drives I don't care about. I want to exclude these from some searches, I am able to do this with a series of NOT/OR commands, as shown below,  but I feel like there is an easier way with less syntax.  How can I exclude instances G thru L ,  in one command, without having to specify each instance as I do below? host=vor* NOT (host="vor-pxy-prd1*" instance=G: OR instance=H: OR instance=I: OR instance=J: OR instance=K: OR instance=L:)   Thanks for any ideas - ... View more