Got this problem for a while. Then today I updated pihole, flushed all logs, restarted everything. Still does not work.
A list query showed no entries for ntp.org or in-addr.arpa (concerning the "Show permitted domain entries" switch). I will uncheck that box now just for experimenting but actually want it to be checked.
The clients are ok. I don't mind if they ask for the time at ntp.org every hour. And I can't change it to different intervals.
The toplists are important to me to be alerted of unusual activity. But I permit this particular activity and do not want to see it anymore.
Yes, I already made a request on reddit about a month ago, but despite trying, I couldn't make it work.
Strange... I first thought it might be due to the wildcard syntax you used, but I tried it with one of my top domains and wildcards are working. Your debug log doesn't indicate an obvious issue.
Out of curiosity: does it work if you exclude a full domain like 1.north-america.pool.ntp.org?
I already tried full domain and unfortunately it didn't work.
But I just discovered something:
It looks like the toplist filtering does work on the toplist shown in the dashboard, but not for Long-term-data --> Top Lists.
