what is the syntax for fieldname not equals regex
... | regex <field>!="<regex>"
View solution in original post
Let me guess, you want to do a regex on _raw, but you don't want the regex to search one of the fields?
Doesn't that mean "field value not equal regex" ?
you want to exclude some fields from your output?