Filtering on keywords with exceptions

[nidhsha2]

Hi,
I am trying to figure out if there is an easy way to filter based on a word and its negative-form.

For example, I want to filter for all data that does NOT include "dog" , BUT if there is a response with "no dog", then I want to capture that data as well.

index=data_log AND response!="*dog*"

Any ideas on this?

[woodcock · Accepted solution]

Like this:

index=data_log AND (response!="*dog*" OR response="*no dog*")

[nidhsha2]

Did the trick, thank you!

[skoelpin]

Try this

index=data_log AND (response!="*dog*" OR response="no dog")

[nidhsha2]

Unfortunately I did try that, and my response of "no dog" is still not included. I think the != dog takes precedence over my next OR statement?