How to filter out one field events base on other field with two events?

[Rithekakan]

Hi All,
I have this report 

My requirement is only show in table those event that do not have the Plugin Name = "TLS Version 1.1 Protocol Deprecated"  with the Port= 8443 OR =8444 as I have fill color with yellow. But, still keep show the event  that have Plugin Name = "TLS Version 1.1 Protocol Deprecated " with other Port exclude Port 8443 OR 8444.
I am using below search

and the result show only Plugin Name = "TLS Version 1.1 Protocol Deprecated " with other port exclude Port 8443 OR 8444.
I want a result show all Plugin Name...... exclude Plugin Name = "TLS Version 1.1 Protocol Deprecated"  that have  Port= 8443 OR =8444
Any suggestions?

[richgalloway · Accepted solution]

The logic regarding the Port field is incorrect.  (Port!=8443 OR Port!=8444) will not exclude anything because every port number is either not 8443 or not 8444.  Perhaps (Port!=8443 AND Port!=8444) is what was intended?  Another way to write it is NOT (Port=8443 OR Port=8444)