I have the same need right now. I am wondering if do you have resolved that after this time? I am trying to round,2 but looks like that Splunk visualization do that in their own, going default to round,3 I appreciate any help. Thank you ... View more

You can try  <your search> | search NOT EventCode IN (1234, 2345, 3456, 4567, 5678, 6789, 7890) Hope this help. @jundai   ... View more

Thanks for the clarification. Just so you know-- when you downvote it takes away karma points from your own profile and from the user you downvote, so please use that feature judiciously for posts you come across that include poor etiquette or incorrect/ misleading answers/content. We have a karma points contest going on, so every point counts. Happy Splunking! ... View more