[edit system syslog]
host 192.0.2.1 {
  any any;
  match "!(.*cron.*)";
}