Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to edit my search to filter out results where the HTTP Referrer contains a Blank or a Dash?

$
0
0
I have a search as follows: (Referrer!="*bing*" AND Referrer!="*google*") Note: Referrer is the http_referrer field from Apache Logs. The above includes log entries that have the Referrer as **blank** and also the one that have a **-** (dash) How can I filter out the entries that have dash and blanks as well? I tried the following but it didn't do the trick: (Referrer!="*bing*" AND Referrer!="*google*" AND Referrer!="\\-" AND Referrer="*") Please advise

Viewing all articles
Browse latest Browse all 47296

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>