# Filtering out event\_data.TargetUserName ending in $

**URL:** https://discuss.elastic.co/t/filtering-out-event-data-targetusername-ending-in/108750
**Category:** Elasticsearch
**Created:** [November 22, 2017, 4:00pm UTC](https://discuss.elastic.co/t/filtering-out-event-data-targetusername-ending-in/108750 "2017-11-22T16:00:50Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![Maekee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maekee/32/21708_2.png) [@Maekee](https://discuss.elastic.co/u/Maekee)
#### Post date: [November 22, 2017, 4:50pm UTC](https://discuss.elastic.co/t/filtering-out-event-data-targetusername-ending-in/108750/2 "2017-11-22T16:50:52Z")

</div>

I would like to invert this, to say not contains $

> {  
> "query": {  
> "regexp": {  
> "event\_data.TargetUserName": "[a-zA-Z0-9-\_]{1,32}"  
> }  
> }  
> }

---

_[View the full topic](https://discuss.elastic.co/t/filtering-out-event-data-targetusername-ending-in/108750)._