IoCExport > Filter
22 August 2024
ID 199665
Defines the filtering rules for data to be exported.
Path
IoCExports > IoCExport > Filter
Attributes
This element has the following attributes.
Filter element attributes
Attribute | Description |
---|---|
| Specifies the name of the field to which filtering rules are applied and /or which must be exported. You can specify indicator attribute names from the indicator database. For the list of possible names, see section "Working with indicators" The name can be in a range from 2 to 255 characters in length, must contain only lowercase ASCII characters and cannot begin with a hyphen ( This attribute is mandatory. |
| Specifies filtering criteria for the field. It is allowed to use a This attribute is mandatory. |
| Specifies whether the field values must be included in the report file. If the field values must be included to the report file, the value is If the field values must not be included in the report file, the value is This attribute is mandatory. |
| Specifies the name of the field that must contain the values from the exported field. This attribute is mandatory if the following requirements are met:
|
| Specifies the sorting order for field values. The following values are possible:
This attribute is optional. |
Example
The following is an example of this element.
<Filter field="ioc_type" value="MD5;SHA1" sort="desc" included="false"/> <Filter field="supplier_name" value="IP Reputation Data Feed" included="true" output_name="feed"/> <Filter field="supplier_confidence" value="*" included="false"/> <Filter field="added_timestamp" value="[*;25.12.2019]" sort="asc" included="false"/> |