Create a Filter (Advanced) Example

Advanced example of how to create a filter in Cortex XSOAR. filters transformers objects playbooks
In this example, we want to see the
LastResolved
time only from the
demisto.com
host name.
This is part of the data where we want to filter:
  1. From the
    Filters & transformers
    window, in the
    Get
    field, type
    IP.AutoFocus.Resolutions.LastResolve
    .
  2. In the
    Filter
    section, click
    Add filter.
    Cortex XSOAR calculates automatically that the context root to filter is
    IP.AutoFocus.Resolutions
    .
  3. In the left-hand side, add
    Hostname
    to the filter.
  4. Select
    Equals (String)
    Ends with
  5. In the right-hand side add
    demisto.com
    .
  6. Click the tick box to save.
  7. Click
    Test
    .

Recommended For You