Log : regex to exclude a pattern

RouterOS General
1

Hi,

I'm looking for exclude user actions from logs to exclude all login/logout for specifics users.

So, regex is made for that : Log | RouterOS Manual

But i don't understand if my regex is wrong OR the escaped char like shown in cli bellow:

Regex is (tested on regex101) :

^(?!.*(prometheus|admmikrotik)).*$

CLI is :

/system logging
add action=logaccount regex="^(\?!.*(prometheus|admmikrotik)).*\$" topics=account
add action=syslogaccount regex="^(\?!.*(prometheus|admmikrotik)).*\$" topics=account

Who has already exclude pattern instead of including it from logging rules ?

2

See Log rule regex doesn't work for negative lookahead

3

Simply RouterOS for RegEx use only POSIX standard without metadata (Character classes) or syntax from other languages

https://en.wikibooks.org/wiki/Regular_Expressions/POSIX_Basic_Regular_Expressions

4

Including this extended functionality in the regex parser may be involved, but couldn't just an inverted match ("!") option be added?

5

Thank you i've not seen this post !