Sometimes you aren't sure what you are looking for, but you know what you are not looking for and you want to eliminate that from the view.
In these cases you will want to use LIKE, IS, IN, and NOT. This article will show you how to get those operators to work for you using commonly used examples.
LIKE can be used for pattern matching. This does not work for any number and can only be used text fields. (i.e. host, username, hostname)
NOTE: Use the wildcard % either before the text, after the text, or both.
Example: Host LIKE %ama% will return any session where "ama" is in the host field. Including www.amazon.com, m.media-amazon.com, www.amanet.org, etc.
IS requires an exact match and can be difficult to use. For Untangle reporting purposes, it is best to use IS when searching for a NULL value.
Example: username IS NULL will return any session where the username field is blank.
Since LIKE requires an exact match, using NOT with it can be very useful to narrow down a search.
Example: username IS NOT NULL will return any session where the username field is not blank.
IN is fantastic for use in Untangle because every condition you add is an AND condition, which means that every condition needs to be true in order for any results to be returned.
Using the IN condition allows you to look for anyone of a number of results. Example: if you are looking for any session that was sent to server port 53 OR 22 OR 80. You can only do this in Untangle using the IN operator.
NOTE: You must place () around the argument and use commas to separate the number, with no spaces.
Example: server port IN (53,22,80) will return only sessions where the server port was either 53, 22, OR 80.
NOT is an operator that only works in conjunction with IS, LIKE, and IN. NOT is used to negate a condition. NOT IN, IS NOT, NOT LIKE.