hiding results in query log using wildcards ect. -google, -steam

General
1

Is there a way to filter querylogs, by that i mean hide, but not show.
So for example, my 24 hr log for my main pc is 400 pages.
I know i have multiple logs for google steam, ect, ect.
I know i can type in google in the domain and everything with google will be shown, i want the reverse, i want to be able to type -google or !google and get it to hide everything with google in those results, then have multiple entries,
-google -nord -steam
ect ect.
Is there a way to do this, my main reason is I know that most of my traffic is what should be there, i want a quick way to find out what shouldnt be there, by filtering my normal stuff,
rather than exporting the whole query log.

Any Ideas?

Cheers
Mac.

2

Sounds a bit like : Use regex/wildcards to exclude domains from search

Am I right ? :slight_smile:

3

You can apply a regex search string to the text output of the dnsmasq log at /var/log/pihole/pihole.log. (and the previous instances of the log).

Example:

sudo cat /var/log/pihole/pihole.log | grep 'dropbox' | grep 'reply'

See man grep for syntax.