If you put your 'not' in the pattern box then it is treating it as part of the pattern to search for. At least what I gleaned from the asp. Use the syslog viewer app on the server, that should get you the filtering you want. Or, barring access to that, you can create a report that would also give you what you need.
If you need more detail let me know.
