Hi Guys,
I am try to exclude field value . need to exclude message=""API:START: /v1/Journals_outbound"
index="mulesoft" applicationName="ext" environment=DEV (message="API: START: /v1/Journals_outbound")
OR (message="API: START: /v1/revpro-to-oracle/onDemand") OR (message="API: START: /v1/fin_Zuora_GL_Revpro_JournalImport")
OR (message="API: START: /v1/revproGLImport/onDemand*") | search NOT message IN ("API: START: /v1/Journals_outbound")
Try removing it from your initial filter
index="mulesoft" applicationName="ext" environment=DEV (message="API: START: /v1/revpro-to-oracle/onDemand") OR (message="API: START: /v1/fin_Zuora_GL_Revpro_JournalImport")
OR (message="API: START: /v1/revproGLImport/onDemand*")