Skip to main content

Allow filters in Analysis to use wildcards

Email Security

All the filters in Analysis are a “starts with” filter, and sometimes you want to look for anything that came from a .ru domain, or anyone that used a email address that had the word “invoice” in it. But current filters don’t allow that, everything is “starts with” and using something like “*.ru” or “*invoice*@*.*” doesn’t work.

Posted by Andy Suarez ·
4 comments

Log in to comment and vote

Comments4

  • Jason Metcalf

    •

    Oct 14

    •

    Merged request

    •

    2 votes

    Allow "not equals" Operation in Filters

    When using the Widget Filter Editor, one can add any number of criteria to include, but there’s not currently an option to select single values to exclude.

    Say I want to search for all Threat Categories for a specific organization or team except one or two. Or I want to check on emails from all Sender Locations except the US.

    It would be nice to be able to only exclude the specific categories instead of selecting everything except for them.

  • Erik DelBene

    •

    Mar 9

    Support for regular expressions (regex) would also be very much appreciated.