I have this search:
| metadata type=hosts index=*a OR index=os index!=aruba
I want to get all the hosts in all the indexes except the aruba index.
The NOT command doesn't work either. How can I user the index-*a and not include the aruba index?
↧