Greetings,
I'd like to remove some spurious errors from my application by filtering them out. Each error is distinct, and they all have a common format. As per usual, my application deals with fruit. How can I filter out the following 7 errors without having to make each one a literal string?
Examples I want to filter out:
Examples I still want to keep in:
My assumption is that I will have to create a search string which specifically 'NOTs' all of the examples in the top list.
You can do this with a subsearch:
https://docs.splunk.com/Documentation/SplunkCloud/6.6.1/SearchTutorial/Useasubsearch
OR if you are on the latest version of Splunk, with the IN
operator (hooray for @richfez):
http://docs.splunk.com/Documentation/Splunk/6.6.2/SearchReference/ConditionalFunctions#in.28VALUE-LI...
You can do this with a subsearch:
https://docs.splunk.com/Documentation/SplunkCloud/6.6.1/SearchTutorial/Useasubsearch
OR if you are on the latest version of Splunk, with the IN
operator (hooray for @richfez):
http://docs.splunk.com/Documentation/Splunk/6.6.2/SearchReference/ConditionalFunctions#in.28VALUE-LI...