[Andrew Schweitzer <a.schweitzer.grps@xxxxxxxxx>]

ronnie sahlberg wrote:
> The difference is the difference between the upside down A (==For ALL it 
> is true)
> and the mirrored E (==there EXISTS at least one)
>
> I.e.  
> payload.packet.a_field != 1
> is only the same as
> !(payload.packet.a_field == 1)
>
> if this field exists exactly once in the set.
>
> If the field exists multiple times   then
> payload.packet.a_field != 1
> is no longer the same as
> !(payload.packet.a_field == 1)
>
>
> try rewriting your filters to be
> !(payload.packet.a_field==1)
> instead

Awesome, it worked, thanks.