# How to I exclude $ in my searches

**URL:** <https://community.graylog.org/t/how-to-i-exclude-in-my-searches/7997>\
**Category:** Graylog Central (peer support)\
**Created:** [December 12, 2018, 3:25am UTC](https://community.graylog.org/t/how-to-i-exclude-in-my-searches/7997 "2018-12-12T03:25:43Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![blason](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/blason/32/2930_2.png) [@blason](https://community.graylog.org/u/blason)\
**Post date:** [December 12, 2018, 3:25am UTC](https://community.graylog.org/t/how-to-i-exclude-in-my-searches/7997/1 "2018-12-12T03:25:43Z")

</div>

Hi guys,

I need to exclude whenever there is $ in TargetUserName:

Can someone please guide me how to?

I have following query

EventID:4624 AND NOT TargetUserName:(SYSTEM WINFGTDNS01$)  
So would like to exclude all entries which has $ in it

---

<div class="post-metadata">

**Author:** ![anmolsharma](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/anmolsharma/32/3456_2.png) [@anmolsharma](https://community.graylog.org/u/anmolsharma)\
**Post date:** [December 12, 2018, 6:17am UTC](https://community.graylog.org/t/how-to-i-exclude-in-my-searches/7997/2 "2018-12-12T06:17:12Z")

</div>

I am not very sure if this can work as expected in your use case but you can give a try querying like below:

```auto
EventID:4624 AND NOT TargetUserName:"*$*"

```

**PS** You need to cross check the validity of results obtained form the query above.

---

<div class="post-metadata">

**Author:** ![macko003](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/macko003/32/3175_2.png) [@macko003](https://community.graylog.org/u/macko003)\
**Post date:** [December 12, 2018, 10:34am UTC](https://community.graylog.org/t/how-to-i-exclude-in-my-searches/7997/3 "2018-12-12T10:34:51Z")

</div>

if you use \* at the beginning you should check and enable the graylog’s allow\_leading\_wildcard\_searches option in server.conf

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [December 26, 2018, 10:39am UTC](https://community.graylog.org/t/how-to-i-exclude-in-my-searches/7997/4 "2018-12-26T10:39:07Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.