Forum Discussion
KQL query question: Filter out results where condition1, condition2, condition3 all evaluate true
Hi Sentinel friends, I've googled and read through many guides and can't find an easy way to perform a multi-variable exclusion statement. I need to be able to exclude a result if multiple variab...
Ofer_Shezaf
Microsoft
Microsoftbrowesec , CliveWatson : I think it might be simpler. You should use not and not "!" as the not unary operators. "!" is just part of the binary "not equal" operator.
| where not(condition1 == "x" and condition2 == "y" and condition3 == "z")
should work
~ Ofer
- Thanks Ofer, this worked for me!
