US Patent 10990887 Anything-but matching using finite-state machines

Methods, systems, and computer-readable media for anything-but matching using finite-state machines are disclosed. A rule base is compiled based at least in part on one or more rule patterns, including an anything-but rule pattern. The rule patterns comprise one or more field values. The rule base represents one or more finite-state machines comprising a plurality of states and encode a specified value for the anything-but rule pattern. A plurality of events are received comprising field values describing resources in a provider network. The rule patterns are evaluated against the events using the rule base. Events matching the specified value using the rule base are excluded from a set of events matching the anything-but rule pattern.