Learn which text or string fields support contains and regex filters.
Access_Resource | File_Path | Registry_Value |
Application | File_Type | Request_Type |
Application_Protocol | Filename | Response_Code |
Area | Forwarding_Status | Return_Code |
Authoritative_Answer | From | RTMP_Application |
Bcc | From_Address | Sensor_Name |
Caller_Process | FTP_Command | Sensor_Type |
Catalog_Name | Host | Sensor_UUID |
Category | HTTP_Req_Cookie | Session_Status |
Cc | HTTP_Req_Host | Signature ID |
Client_Version | HTTP_Req_Method | Signature_Name |
Command | HTTP_Req_Referer | SNMP_Error_Code |
Contact_Name | HTTP_Req_URL | SNMP_Item |
Contact_Nickname | HTTP_User_Agent | SNMP_Item_Type |
Cookie | Incomtin_ID | SNMP_Operation |
Creator_Name | Interface | SNMP_Version |
Database_ID | Interface_Dest | Source User |
Database_Name | Job_Name | Source_Context |
Datacenter_ID | Job_Type | Source_Logon_ID |
Datacenter_Name | Language | Source_Network |
DB2_Plan_Name | Local_User_Name | Source_UserID |
Delivery_ID | Logical_Unit_Name | Source_Zone |
Description | Logon_Type | SQL_Command |
Destination User | LPAR_DB2_Subsystem | SQL_Statement |
Destination_Directory | Mail_ID | Step_Count |
Destination_Filename | Mailbox | Step_Name |
Destination_Hostname | Mainframe_Job_Name | Subject |
Destination_Logo_ID | Malware_Insp_Action | SWF_URL |
Destination_Network | Malware_Insp_Result | Table_Name |
Destination_UserID | Management_Server | Target_Class |
Destination_Zone | Message_ID | Target_Context |
Detection_Method | Message_Text | Target_Process_Name |
Device_Action | Method | TC_URL |
Direction | NTP_Client_Mode | Threat_Category |
Directory | NTP_Opcode | Threat_Handled |
DNS_Class | NTP_Request | Threat_Name |
DNS_Name | NTP_Server_Mode | To |
DNS_Type | Object | To_Address |
Domain | Object_Type | URL |
Event_Class | Operating_System | URL_Category |
External_Application | Policy_Name | User_Agent |
External_DB2_Server | Privileged_User | User_Nickname |
External_Hostname | Process_Name | Version |
External_SessionID | Query_Response | Virtual_Machine_ID |
Facility | Reason | Virtual_Machine_Name |
File_Operation | Referrer | |
File_Operation_Succeeded | Registry_Key |