RegEx to exclude login probe activity – SQL Diagnostic Manager for SQL Server – Performance Monitoring & Tuning

I also want to exclude alert like that. Idera SQL error log alert configuration permits this with regex but I do not know how can I write the syntax. There is no example in documentation. For example should I use regex like that: not like ‘Logon SSPI Handshake%’

The message are shown below in context (if applicable):             

Critical  02.11.2022 09:08:56       Logon   Error: 17806, Severity: 20, State: 14.

OK          02.11.2022 09:08:56       Logon   SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. The logon attempt failed

Read more here: Source link