Need a bit of assistance.

Hi Jim,

The example you shared work fine, after adjusting it to the data in the demo environment I created this query:

traces
| where customDimensions != ""
| where message contains "StartProfiler" // "Received 'job valid' notification"
| extend agentId = customDimensions['AgentSession']
| extend Source = customDimensions["Source"]
| order by tostring(agentId) desc
| project message, severityLevel, timestamp, Source, agentId
| where message !contains "triggered" 

and as you can see I've added the !contains on the last line, to exclude results with a message that contains a certain string. Is that what you need?