Splunk Where Not Command In Sql