How to use NOT operator in watcher

Elastic Stack Elasticsearch
1

Hi,

Is there any other way to get notification containing
"match": ["error" NOT "org.apache"]

Thanks.

2

Use a bool query and put the match "org.apache" in a must_not clause and the match "error" in the must part.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.