Hi,
Is it possible to get splunk to search for a query and not include the last X number of events?
thanks,
You could add a row number and only include rows greater than X