End-of-Life (EoL)

Filter Objects Using a Transformer

filter transformer playbook
When filtering data, Cortex XSOAR only filters the first object in the data. If you want to filter nested data you can either Filter Objects Using the Set Command or use a transformer as a filter.
For example, to filter an email from
EWS.Email
, if you add a filter for an email, Cortex XSOAR filters EWS and not the Email. To filter the email, you need to add a transformer as a filter using the
WhereFieldEquals
operator.
  1. In the
    Get
    field, type the data you want to use. For example,
    EWS.Email
    .
  2. In the
    Apply operations on the field
    , add a transformer. In the this example, we want to filter all emails from
    asaf@demisto.com.
  3. Click
    Test
    to view the filter.

Recommended For You