I have a dashboard which uses a base search that finds all events that we are interested in, then use post-process searches to classify this data into several different categories ("known concerns").
In the end, I want to display all events that are not picked up by any of these post-process searches, but I can't seem to find any primitive that would do this.
Basically, the logic I need is: BASE XOR (CATEGORY1 OR CATEGORY2 OR ...)
Ideally without having to duplicate the post-process searches again, since the results are already found.
... View more