Syslog Viewer: Syslog Rule Message pattern: Regular expression help, please?

Question

I am trying to make a Syslog Rule to send me an email when certain messages arrives to the Syslog viewer.

If I want to get notified when this message arrives in the Syslog :

cannot contact real server 170.11.192.

Then putting this text in the 'Syslog Message Pattern' text box accomplishes this:

*cannot contact real server 170.11.192.*

But, in addition to the above condition, I do not want to be notified if the following members of this Class C IP address range arrive: 170.11.192.223 or 170.11.192.224 or 170.11.192.247 what can I put in the 'Syslog Message Pattern' line to accomplish this?  All the regular expressions I have tried never return any results in the Syslog Viewer product.

Thanks!

tisaroo · Accepted Answer

I figured out the answer.  Suggest to anyone trying to figure this out on their own that you download the ultrapico Expresso product.  It provides a great console for writing and testing regular expressions.