# Exclude Multiple Patterns in Kibana Visualisation using wildcards

**URL:** <https://discuss.elastic.co/t/exclude-multiple-patterns-in-kibana-visualisation-using-wildcards/89513>\
**Category:** Kibana\
**Created:** [June 15, 2017, 7:19am UTC](https://discuss.elastic.co/t/exclude-multiple-patterns-in-kibana-visualisation-using-wildcards/89513 "2017-06-15T07:19:56Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![teejayuu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/teejayuu/32/18356_2.png) [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Post date:** [June 15, 2017, 7:19am UTC](https://discuss.elastic.co/t/exclude-multiple-patterns-in-kibana-visualisation-using-wildcards/89513/1 "2017-06-15T07:19:56Z")

</div>

Hi,

How do I exclude multiple terms from Kibana 5.3.2 visualisation?

I am trying to get the top 10 email recipients by message count and I need to exclude certain system accounts. If I use a single exclude _Exclaimer.\*_ it excludes that email address, however _Exclaimer., Inboundproxy._ excludes nothing?

So, what is the correct syntax for excluding multiple patterns using wildcards?

Cheers  
Tony

---

<div class="post-metadata">

**Author:** ![Sjaak01](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Post date:** [June 15, 2017, 8:02am UTC](https://discuss.elastic.co/t/exclude-multiple-patterns-in-kibana-visualisation-using-wildcards/89513/2 "2017-06-15T08:02:59Z")

</div>

Use NOT.

Example  
NOT email\_address\_field: (\*@yourdomain1.com OR \*@yourdomain2.com)

---

<div class="post-metadata">

**Author:** ![teejayuu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/teejayuu/32/18356_2.png) [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Post date:** [June 15, 2017, 8:20am UTC](https://discuss.elastic.co/t/exclude-multiple-patterns-in-kibana-visualisation-using-wildcards/89513/3 "2017-06-15T08:20:30Z")

</div>

Thanks, Sjaak. Surely if I put NOT in the exclude field it becomes a double negative:

 ![](https://us1.discourse-cdn.com/elastic/original/3X/e/8/e804ddbbcc21eeae9937cee7451312919ce77945.JPG)

---

<div class="post-metadata">

**Author:** ![Sjaak01](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Post date:** [June 15, 2017, 11:44pm UTC](https://discuss.elastic.co/t/exclude-multiple-patterns-in-kibana-visualisation-using-wildcards/89513/4 "2017-06-15T23:44:27Z")

</div>

You can put it in the search bar at the top to totally exclude the unwanted emails from the data you're basing your visualization on.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 13, 2017, 11:44pm UTC](https://discuss.elastic.co/t/exclude-multiple-patterns-in-kibana-visualisation-using-wildcards/89513/5 "2017-07-13T23:44:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.