log filtering regex with both include and exclude

[rtkluttz]

Can someone help me with an example of a regex with both an include and exclude in the same line?

My example here for a Message regex...
!(nxdomain|127.0.0.1|192.168.1.7.192.168.1.55)

but I want to include all lines containing the string NOERROR

I can get regex to work if it is either all includes or all excludes, but no combination of the two.