/
Sources and Data Filtering

Sources and Data Filtering

Owned by Noga Aviram (Unlicensed)
Last updated: Jan 11, 2023 by Omry Koschitzky
1 min read

Every flow must start with a source filter. There are 2 available options:

  1. Flow Source - Using an existing flow, multiselect or All data.

Field Label

Allowed Inputs

Default value

Description

Field Label

Allowed Inputs

Default value

Description

IDS

Multiselect, existing Flow Id or AllData.

Previous Flow Id or AllData if previous flow not present.

A list of sources to join into the flow.

2. Source and Data filter - Using a simple query to filter only matching events.

The syntax is equivalent to XPLG Search syntax (queries) in order to allow to filter specific events from specific sources.

Field Label

Allowed Inputs

Default value

Description

Field Label

Allowed Inputs

Default value

Description

QUERY

Simple query.

Examples:

  1. error

  2. username=assaf

  3. log.somelogname

  4. * in log.somelogname

Empty

A simple query to filter only matching events.

 

Related content