Step: Graph String Filter

This step compares a data property from your default graph against a string (text) or package variable value. Multiple conditions can be applied and combined with an AND or an OR. If the conditions match, the package continues down the True [+] side of the step. If the conditions do not match, the package continues down the False [-] side.

Operates on the package graph - only on the primary object

Allows Freemarker Template Expressions

  • Choose Property: the data property predicate of the incoming object you want to compare. For this step, the value of this property should be an IP address of type "String".
  • (not): Check the box to invert the comparison
  • contains: Choose from a list of comparison methods. Available options are "contains, equals, starts with, ends with, matches regex, contained by"
  • In addition to text for the comparison, Freemarker expressions can be used. For example, if you have used a Package Query to store a hostname as a variable called hostName you could use this step to compare winevent:hasHostName with ${hostName[0][0]}
  • Add a new condition: Click the plus button to add a new set of conditions, and choose to combine them all with either AND or OR.
  • The header of each condition section can be collapsed by using the triangle on the far left of the section name. The section names contains a summary of the condition section.
  • Click the red X icon next to any section to remove that section from the step settings.
  • step/graph-string-filter
  • Last modified: 2018/10/30 15:30