×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
pkakodkar
Loves-to-Learn
Member since: ‎12-01-2021
‎12-01-2021
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎12-01-2021
View All

Re: Filter the results of the main search based on...

by in Splunk Search
‎12-01-2021 03:58 PM
‎12-01-2021 03:58 PM
@ITWhisperer   I updated the query i am using in the thread above. The query you sent doesnt work . It doesnot filter out the results. One thing to note is in the first query the fieldName is "requestId" and secondquery has fieldName is "RequestId"  Hence i am renaming the field to see if it works ... View more

Filter the results of the main search based on the...

by in Splunk Search
‎12-01-2021 03:11 PM
‎12-01-2021 03:11 PM
  I have 2 independent queries run on 2 different index that give me a list of requestIds. I want to filter/not include the requestIds of the second query in my search. I am trying to use the following query to do so but its not filtering the results from second query. What am i doing wrong here    index="index1" <query1> | rename requestId AS Result | table Result | search NOT [search index="index2" <query2>| rename RequestId AS Result| table Result] ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎12-01-2021 08:40 PM