Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

I want to ignore particular username

$
0
0
I want to ignore below user name. So I written following manner is it correct? ......| where NOT (user="*$" OR user="NOT_TRANSLATED") Now, Can I rewrite as below: ......| where NOT LIKE(user, "*$" OR "NOT_TRANSLATED")

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>