For include smthing and exlude smthing use:
"sad76(@5" -"nkadw((527"
It will include 1ast and exclude second and it will work even if smthing was added before or after these expressions it is like %Search%
Регулярка чувствительна к регистру. Если нужно искать exception, EXCEPTION, sql, и т.д., используй флаг (?i):
fields f1, f2, f3
| filter f1 like /(?i)Exception|SQL|Error/
for and use this
| filter f1 like /Exception/ and f1 like /SQL/