Negate
—Select the check box to interpret
the query as a negation. If, for example, you choose to match entries
in the last 24 hours and/or are originating from the untrust zone,
the negate option causes a match on entries that are not in the
past 24 hours and/or are not from the untrust zone.