How to include some values and exclude some others on the same field?

Elastic Stack Kibana
2

Hey @Huseyin_Tunctepe,

Thanks for bringing this here.
Should the values be strictly excluded? Or would you like to exclude records/values that partially match the pattern?

Have you tried something like this?

message:"puppet-disabled" and not message: (*CHG* or *INC* or *EXC*)

Please let us know about the results.

Best regards,
Mike