Answer by warren for Splunk interesting field exclusion

You can do it this way, too:

index=Student_Entry
| where isnull(subject)
| stats count

from User warren – Stack Overflow https://stackoverflow.com/questions/62381716/splunk-interesting-field-exclusion/62390643#62390643
via IFTTT