Can someone share some example of Negative Look Ahead Regex being used in Logmon.
I am not sure I have ever seen any examples if these in a support case as usually doing not present regex can cause performance issues.
There are many examples of what you are looking for out on the net though.
regex - Regular expression negative lookahead - Stack Overflow
Negative Lookahead - Regex Tester/Debugger
hope this helps
There's a nice set of performance tweaks at https://www.loggly.com/blog/five-invaluable-techniques-to-improve-regex-performance/ and Regex Tutorial—From Regex 101 to Advanced Regex
Like most performance comments it depends on the data and the attention paid to how the language being written in evaluates things.
You can write things in negative lookaheads that can't be easily phrased otherwise and so perhaps the slower single regex might be much faster than the multiple steps necessary to simulate.
Assume you have a log file with criticalities associated with them: INFO, ERROR, CRITICAL, etc.
You want all log lines except INFO.
You could use a filter like is explained at:
regex - Regular expression to match a line that doesn't contain a word? - Stack Overflow
Saves you from having to know what to include.
Alternatively what if you need to match a log line with words in it but they could be any order:
Regex to match string containing two names in any order - Stack Overflow