Here is my current Timelion query. How do I EXCLUDE lines? I'd like to exclude apache log lines that have source.ip ::1 and destination.domain localhost. Thanks.
.es(q='event.dataset:apache.access AND agent.name:server7').label(server7).color(red),
.es(q='event.dataset:apache.access AND agent.name:server8').label(server8).color(green),
.es(q='event.dataset:apache.access AND agent.name:server9').label(server9).color(#0000FF)
.title('Server Requests')
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.