Need help filtering logs on SC4S - vCenter integration

[MrM8BRH]

I'm reaching out for some assistance with filtering logs on our SC4S setup. We've integrated vCenter using SC4S and now we're receiving logs on our Indexer server. I'm trying to filter out a specific source, but I'm not having any luck.

The source I'm trying to filter is:

source="program:sps"

Has anyone else had success filtering logs with SC4S? Can anyone provide some guidance on how to filter this specific source?

Thanks in advance for your help!

[cwadhwani-splunk]

Here is a reference link that can be used to understand how to drop certain events. This will help you.