For example, I have a filter: MSG LIKE QueryAdvisor.* and I want to change it to see all of the events that do not match.
use: ! ( msg like QueryAdvisor.* )
Note the use of parens around the expression being negated..
Try out the latest developer snapshot here, which doesn't require spaces around operators and operands or spaces around parens..