Cisco Networks App for Splunk Enterprise: How to exclude certain field from main dashboard?

[Coldfirex]

Howdy,
Is there a way to exclude a certain error from being used in the main dashboard? For instance in the "Syslog severity distribution" without not having IOS log it?
Thanks!

[dbcase]

Have you tried something like this

your search here|where yourerrorcodefield!=yourerrorcodevaluethatyouwanttoexclude|rest of your search

-or-

your index here your sourcetype here yourerrorcodefield!=yourerrorcodevaluethatyouwanttoexclude|rest of your search

[Coldfirex]

This wouldnt be manual searches, but the actual dashboard. Is the dashboard editable?

[dbcase]

It depends on how the dashboard is setup but it is possible. Do you have an edit button in the top right hand corner of the dashboard? If so, click on it then click on the magnifying glass in the top right hand corner of the panel you are interested in. Then click edit search then modify the search string and click apply.