You could try this: /system logging add action=logserver prefix=MikroTik topics=dhcp add action=logserver prefix=MikroTik topics=!debug,!dns To exclude DNS logs from MT. The AD DNS did not forward clients name (all clients are the domain name) so I want keep MikroTik DNS logs and exclude domain DNS...

I have AD DNS which forward DNS requests to MikroTik. Now the Splunk logs two DNS requests, one for AD DNS server and one for client. How I can exclude AD DNS requests?
Thanks

Dear Sir, Thanks for Tool. I get below error (log/splunkd.log) and after that logging stopped. WARN DateParserVerbose - Failed to parse timestamp in first MAX_TIMESTAMP_LOOKAHEAD (32) characters of event. Defaulting to timestamp of previous event (Thu Dec 17 04:11:00 2020). Context: source=udp:514|h...