As of now I do not have the log for a valid 500 Error But for the 500 Error which I want to exclude has two events something like below Date|LOG_LEVEL:INFO|THREAD_NAME:-|CORRELATION:-|MessID:<dynamicvalue>|MESSAGE:LOGTYPE, SERVER=ip, URL=-, URI=-, METHOD=POST, PARA={"MessID":["<dynamicvalue>"],,"Connection":["close"]}, CODE=500, RTIME=342 Date|LOG_LEVEL:ERROR|THREAD_NAME:-|CORRELATION:-|MessID:<dynamicvalue>|MESSAGE:<some message> In the above "MessID"  value will be the same ... View more

The http 500 event which is caused due to an exception has the same fields like the valid http 500 error event. So there is no unique word in the event that I can say NOT "this" ... View more

1. I need to create an alert for http 500 failures 2. But I there is this scenario where some http 500 events when triggered, triggers one more event with a message. So I do not want these type of 500 events to be included in the alert Please help with a query. ... View more