Email Messages Advanced Search Filter

Use the advanced search filter to create and apply customized searches.

For details, see the following:

To view specific data, select from the following optional attributes and operators, and type an associated value.

Table 1. Search Criteria: Email Messages

Attribute

Operator

Action

Sender

Equals/Contains/Does not contain

Type a value

Recipient

Equals/Contains/Does not contain

Type a value

Email Header (From)

Has from/No from

 

Equals/Contains/Does not contain

Type a value

Email Header (To)

Equals/Contains/Does not contain

Type a value

Source IP

Contains/Does not contain/Equals

Type a value

In range/Not in range

Type a range

Source IP Country/Region

In/Not in

Select one or more source IP countries

Sender IP

Contains/Does not contain/Equals

Type a value

In range/Not in range

Type a range

Sender IP Country/Region

In/Not in

Select one or more source IP countries

Message ID

Contains/Does not contain

Type a value

Subject

Has subject/No subject

 

Equals/Contains/Does not contain

Type a value

URL

Has URL/No URL

 

Equals/Like/Contains/Does not contain

Type a value

Attachment

Has attachment/No attachment

 

Equals/Contains/Does not contain

Type a value

Password-protected Attachment

Yes/No

 

File SHA-1

Contains/Does not contain/Equals

Type a value

Threat Name

Contains/Does not contain/Equals/Starts with

Type a value

Threat Type

In/Not in

Select one or more threat types

Identified By

In/Not in

Select one or more identification sources

Policy

Equals/Contains/Does not contain

Type a value

Policy Rule

Equals/Contains/Does not contain

Type a value

User Submitted

Yes/No

 

Action

In/Not in

Select one or more actions