Please add to the documentation how to define searches like “Country is not UNKNOWN” or “IP is not 10.x.x.x”