Eliminate users in Report

[RenatoGoncalves]

Hello,

In need to eliminate some users in results from some reports.

I used de != expression but it didn't work.

Im using this rules: "event.type exists && user.dst exists && user.dst != 'user\things && user.dst != 'things\General' && lc.cid = '1' || lc.cid = '22' and the reports only eliminates the first user

What can i do to remove both users?

Thanks

[JohnKisner]

Order of operations is very important. Try something like this (notice the parenthesis):

event.type exists && user.dst exists && (user.dst != 'VC.LOCAL\rsa-vcenter-logs' && user.dst != 'VC.LOCAL\General') && (lc.cid = 'inf-logcollector01' || lc.cid = 'inf-logcollector02')