Suggestion about Regex in the Advanced/search

[AGirin]

I find myself constantly making the same mistake: I create Regex exception (so I will not see the error again) and also forget to click on Include to uncheck it

It would be great if default action was to exclude as it seems to me most people would want to have Regex to exclude event not to include (maybe I am wrong on that though). Or maybe ask at the end of the process - Do you really want to include> or something like that.

[kiwiz]

Hmm, I think include more reasonable, like with how grep works by default.

[AGirin]

I guess it depends on how we approach monitoring: Include all and remove noise, or only include specific events you want to see. I am testing with number one approach so Include needs to be unchecked all the time. But for the second approach default works just fine. I'll close the issue.