I want to ignore particular username

[N92]

I want to ignore below user name. So I written following manner is it correct?

......| where NOT (user="*$" OR user="NOT_TRANSLATED")

Now, Can I rewrite as below:

......| where NOT LIKE(user, "*$" OR "NOT_TRANSLATED")

[gcusello · Accepted solution]

Hi N92,
at first in like you cannot use a boolean operator, you have to divide your condition and in addition if you use "like" you have to use "%" instead "*".
So

......| where NOT (LIKE(user, "%$") OR LIKE(user, "NOT_TRANSLATED") ) 

Bye.
Giuseppe