I'm trying to write a policy for any line that is not an exact match to what I specify. Say for instance I'm trying to find any lines in our configs for NTP servers that are not the servers I specify.
So, if our servers are 10.1.1.1, the config looks like "ntp server 10.1.1.1 prefer"
I want to write a policy that will tell me any lines that start with "ntp server" but don't have 10.1.1.1 as the server. So, if there is a line that has "ntp server 10.1.1.2" I want an alert.