Create a Filter Example

In this example, we want to filter all EWS Item names that have the extension

exe

.

From the

Filters & transformers

window, in the

Get

field, type

EWS.Items.Name

to extract all Item names in EWS.

Cortex XSOAR calculates that the context root to filter is

EWS.Items

.



In the

Filter

section, click

Add filter.

In the left-hand side, add

Extension

to the filter.

Select

Equals (String)

ignore case

.

In the right-hand side add

exe

.



Click the tick box to save the filter.

Click

Test

.

You can see we have filtered all Item names that have the extension

exe

.