Monitor Data Collection Rules to EXCLUDE eventids

we are struggling to exclude specific EventID's using a DCR against 3 azure based VMs

!= doesn't seem to work.

any guidance appreciated.