How to search through events that do not have a specific field?

[edrivera3]

Hi
I would like to search through my events that do not have the field "rerun". I am trying to do something like this:

| search field!=rerun

[masonmorales]

| fillnull value="foobar" rerun | search rerun="foobar"

[aljohnson_splun · Accepted solution]

| search NOT rerun=*