As such, the correct expression is =~. =={~} will work, but is technically wrong.

Good catch about it never printing its usage. I should make it do that. There is a usage string in the source file, ready to deploy.

I had a custom ASL extension I hacked up for Tiger that funneled incoming network syslog messages to unique logs per host. (Boy was that fun!) I've been trying to replace that with a simple query in Console.app.

While experimenting with aslsearch to build that query, I noticed that a not equal combined with a regex will never match: I was trying to do !={~}(foo.com|localhost).