Logical test is True if
You can filter events using logical comparison operators, such as those shown in the table.
For information about using IN and NI filters, see Types-of-filters, depending on your required filter type:
- EGNX filters
- Integer filters
- Mapped integer filters
Logical relationship types
Operator | Logical test |
---|---|
= | Field is equal to literal |
== | Field is equal to literal |
EQ | Field is equal to literal |
> | Field is greater than literal |
GT | Field is greater than literal |
>= | Field is greater than or equal to literal |
GE | Field is greater than or equal to literal |
< | Field is less than literal |
LT | Field is less than literal |
<= | Field is less than or equal to literal |
LE | Field is less than or equal to literal |
!= | Field is not equal to literal |
<> | Field is not equal to literal |
¬= | Field is not equal to literal |
NE | Field is not equal to literal |
Related topic
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*