Operators - Revision history

Dmorris at 16:08, 7 April 2017

2017-04-07T16:08:13Z

← Older revision		Revision as of 16:08, 7 April 2017
Line 56:		Line 56:
	\| style="text-align:left; vertical-align:top;" \| Condition NOT LIKE (%)value(%)		\| style="text-align:left; vertical-align:top;" \| Condition NOT LIKE (%)value(%)
	\| style="text-align:left; vertical-align:top;" \| Often used in conjunction with % to wildcard the value		\| style="text-align:left; vertical-align:top;" \| Often used in conjunction with % to wildcard the value
	\| style="text-align:left; vertical-align:top;" \| ''Show ~~Firewall events that do~~ not have ~~a destination address (server)~~ in ~~your ISP's subnet. Example 123.45.67~~.~~0/24~~'' <br><br> ~~Server~~ [~~s_server_addr~~] not like ~~123.45.67~~%		\| style="text-align:left; vertical-align:top;" \| ''Show user Events where a user does not have "student" in the username.'' <br><br> Username [username] not like %student%
	\|-		\|-
	\| style="text-align:left; vertical-align:top;" \| IS		\| style="text-align:left; vertical-align:top;" \| IS

Dmorris at 17:55, 20 March 2017

2017-03-20T17:55:04Z

← Older revision		Revision as of 17:55, 20 March 2017
Line 73:		Line 73:
	\| style="text-align:left; vertical-align:top;" \| Is In set of values (value_1, value_2, ...)		\| style="text-align:left; vertical-align:top;" \| Is In set of values (value_1, value_2, ...)
	\| style="text-align:left; vertical-align:top;" \| Condition IN (value_1, value_2, value_3)		\| style="text-align:left; vertical-align:top;" \| Condition IN (value_1, value_2, value_3)
	\| style="text-align:left; vertical-align:top;" \| Requires an exact match it will not match partials~~.<br><br>Only works with integer (whole number) and boolean (true/false) type values~~.		\| style="text-align:left; vertical-align:top;" \| Requires an exact match it will not match partials.
	\| style="text-align:left; vertical-align:top;" \| ''Show In Firewall all entries for web related ports'' <br><br>Server Port [s_server_port] in (53,80,443)		\| style="text-align:left; vertical-align:top;" \| ''Show In Firewall all entries for web related ports'' <br><br>Server Port [s_server_port] in (53,80,443) <br><br>Web Category [web_filter_category] in ('Content Servers','Parked','Online Ads')
	\|-		\|-
	\| style="text-align:left; vertical-align:top;" \| NOT IN		\| style="text-align:left; vertical-align:top;" \| NOT IN
	\| style="text-align:left; vertical-align:top;" \| Is Not In set of values (value_1, value_2, ...)		\| style="text-align:left; vertical-align:top;" \| Is Not In set of values (value_1, value_2, ...)
	\| style="text-align:left; vertical-align:top;" \| Condition NOT IN (value_1, value_2, value_3)		\| style="text-align:left; vertical-align:top;" \| Condition NOT IN (value_1, value_2, value_3)
	\| style="text-align:left; vertical-align:top;" \| Requires an exact match it will not match partials~~.<br><br>Only works with integer (whole number) and boolean (true/false) type values~~.		\| style="text-align:left; vertical-align:top;" \| Requires an exact match it will not match partials.
	\| style="text-align:left; vertical-align:top;" \| ''Show all traffic in Application Control that is not email related.''<br><br>Server Port [s_server_port] not in (25,110,143,993.995.587,465)		\| style="text-align:left; vertical-align:top;" \| ''Show all traffic in Application Control that is not email related.''<br><br>Server Port [s_server_port] not in (25,110,143,993.995.587,465) <br><br>Web Category [web_filter_category] not in ('Content Servers','Parked','Online Ads')
	\|}		\|}

Cknickerbocker at 16:31, 20 March 2017

2017-03-20T16:31:46Z

← Older revision		Revision as of 16:31, 20 March 2017
Line 16:		Line 16:
	\| style="text-align:left; vertical-align:top;" \| ''Only show Web Filter events where host accessed is "www.google.com" ''<br><br>Host [host] = www.google.com		\| style="text-align:left; vertical-align:top;" \| ''Only show Web Filter events where host accessed is "www.google.com" ''<br><br>Host [host] = www.google.com
	\|-		\|-
	\| style="text-align:left; vertical-align:top;" \| !=		\| style="text-align:left; vertical-align:top;" \| != or <>
	\| style="text-align:left; vertical-align:top;" \| Is Not Equal To		\| style="text-align:left; vertical-align:top;" \| Is Not Equal To
	\| style="text-align:left; vertical-align:top;" \| Condition != value<br>Condition <> value		\| style="text-align:left; vertical-align:top;" \| Condition != value<br>Condition <> value

ENewvine at 21:12, 22 January 2016

2016-01-22T21:12:29Z

New page

Operators are used with Conditions to create custom reports and alerts. The operator is used to evaluate the value criteria specified for the given condition.

{| border="1"
|-
! style="width:1%; text-align:left; padding:5px;" | Operator
! style="width:14%; text-align:left; padding:5px;" | Description
! style="width:33%; text-align:left; padding:5px;" | Syntax
! style="width:22%; text-align:left; padding:5px;" | Notes
! style="width:30%; text-align:left; padding:5px;" | Example
|-
| style="text-align:left; vertical-align:top;" | =
| style="text-align:left; vertical-align:top;" | Is Equal To
| style="text-align:left; vertical-align:top;" | Condition = value
| style="text-align:left; vertical-align:top;" | Requires an exact match it will not match partials.
| style="text-align:left; vertical-align:top;" | ''Only show Web Filter events where host accessed is "www.google.com" '' Host [host] = www.google.com
|-
| style="text-align:left; vertical-align:top;" | !=
| style="text-align:left; vertical-align:top;" | Is Not Equal To
| style="text-align:left; vertical-align:top;" | Condition != value Condition <> value
| style="text-align:left; vertical-align:top;" | Requires an exact match it will not match partials.
| style="text-align:left; vertical-align:top;" | ''Show all Web Filter events where client IP address is not "192.168.2.214" '' Client [c_client_addr] != 192.168.2.214
|-
| style="text-align:left; vertical-align:top;" | >
| style="text-align:left; vertical-align:top;" | Is Greater Than
| style="text-align:left; vertical-align:top;" | Condition > value
| style="text-align:left; vertical-align:top;" | Requires an exact match it will not match partials.
| style="text-align:left; vertical-align:top;" | ''Show all activity in Firewall for non-standard ports (1024 - 65535) '' Server Port [s_server_port] > 1024
|-
| style="text-align:left; vertical-align:top;" | <
| style="text-align:left; vertical-align:top;" | Is Less Than
| style="text-align:left; vertical-align:top;" | Condition < value
| style="text-align:left; vertical-align:top;" | Requires an exact match it will not match partials.
| style="text-align:left; vertical-align:top;" | ''Show all instances where available memory was less than 500 MB. Server Status Events, found under System > Reports, shows memory usage.'' Memory Free [mem_free] < 524288000 (it is stored in the database as bytes)
|-
| style="text-align:left; vertical-align:top;" | >=
| style="text-align:left; vertical-align:top;" | Is Greater Than Or Equal To
| style="text-align:left; vertical-align:top;" | Condition >= value
| style="text-align:left; vertical-align:top;" | Requires an exact match it will not match partials.
| style="text-align:left; vertical-align:top;" | ''Show all sessions scanned by Shield where total bytes sent to destination IP is greater than 1 GB'' To-Server Bytes [p2s_bytes] >= 1073741824 (it is stored in the database as bytes)
|-
| style="text-align:left; vertical-align:top;" | <=
| style="text-align:left; vertical-align:top;" | Is Less Than Or Equal To
| style="text-align:left; vertical-align:top;" | Condition <= value
| style="text-align:left; vertical-align:top;" | Requires an exact match it will not match partials.
| style="text-align:left; vertical-align:top;" | ''Show all instances where Free Disk Space was less than or equal to 100 GB. Server Status Events, found under System > Reports, shows free disk space.'' Disk Free [disk_free] < 100000000000 (it is stored in the database as bytes)
|-
| style="text-align:left; vertical-align:top;" | LIKE
| style="text-align:left; vertical-align:top;" | Is Similar to
| style="text-align:left; vertical-align:top;" | Condition LIKE (%)value(%)
| style="text-align:left; vertical-align:top;" | Often used in conjunction with % to wildcard the value
| style="text-align:left; vertical-align:top;" | ''Show all Web Filter Events where a user accessed any part of google.com.'' Host [host] like %google.com
|-
| style="text-align:left; vertical-align:top;" | NOT LIKE
| style="text-align:left; vertical-align:top;" | Is Not Similar to
| style="text-align:left; vertical-align:top;" | Condition NOT LIKE (%)value(%)
| style="text-align:left; vertical-align:top;" | Often used in conjunction with % to wildcard the value
| style="text-align:left; vertical-align:top;" | ''Show Firewall events that do not have a destination address (server) in your ISP's subnet. Example 123.45.67.0/24'' Server [s_server_addr] not like 123.45.67%
|-
| style="text-align:left; vertical-align:top;" | IS
| style="text-align:left; vertical-align:top;" | Is value
| style="text-align:left; vertical-align:top;" | Condition IS NULL Condition IS true/false/unknown Condition1 IS distinct from Condition2
| style="text-align:left; vertical-align:top;" | Requires an exact match it will not match partials. Does not work with string or number values
| style="text-align:left; vertical-align:top;" | ''Show all Shield events where there was no username on the session.'' Username [username] is NULL
|-
| style="text-align:left; vertical-align:top;" | IS NOT
| style="text-align:left; vertical-align:top;" | Is Not value
| style="text-align:left; vertical-align:top;" | Condition IS NOT NULL Condition IS NOT true/false/unknown Condition1 IS NOT distinct from Condition2
| style="text-align:left; vertical-align:top;" | Requires an exact match it will not match partials. Does not work with string or number values
| style="text-align:left; vertical-align:top;" | ''Show all Application Control events that have Detail values.'' Detail (Application Control) [application_control_detail] is not NULL
|-
| style="text-align:left; vertical-align:top;" | IN
| style="text-align:left; vertical-align:top;" | Is In set of values (value_1, value_2, ...)
| style="text-align:left; vertical-align:top;" | Condition IN (value_1, value_2, value_3)
| style="text-align:left; vertical-align:top;" | Requires an exact match it will not match partials. Only works with integer (whole number) and boolean (true/false) type values.
| style="text-align:left; vertical-align:top;" | ''Show In Firewall all entries for web related ports'' Server Port [s_server_port] in (53,80,443)
|-
| style="text-align:left; vertical-align:top;" | NOT IN
| style="text-align:left; vertical-align:top;" | Is Not In set of values (value_1, value_2, ...)
| style="text-align:left; vertical-align:top;" | Condition NOT IN (value_1, value_2, value_3)
| style="text-align:left; vertical-align:top;" | Requires an exact match it will not match partials. Only works with integer (whole number) and boolean (true/false) type values.
| style="text-align:left; vertical-align:top;" | ''Show all traffic in Application Control that is not email related.'' Server Port [s_server_port] not in (25,110,143,993.995.587,465)
|}