How to I filter the results to either exclude specific server names or server names beginning with a certain string ? It appears the alert has to be configured and the scope search query amended. Currently it's as below.
vm.snap.dateCreated:[* TO now-30days]
I've tried all sorted of syntax without success
i.e “vm.name:Servername*” AND vm.snap.dateCreated:[* TO now-30days]
If I save the amendment and run Evaluate now I get the same or no results at all.
Is a better Search query reference available than the one linked from Help ?