Idea ID: 2877619

Soar Case Search Scope Item Value Operators

Status: New Idea

Soar Case Search Scope Item Value Operators allow for contains, not contains in subnet and not in subnet.  This feature would allow for more precise search operators such as Equals. Current our IPS feeds events to SOAR and has Blocked or Would be Blocked as a scope item.  So if we filter on Blocked it would also return Would Be Blocked cases.  Additionally you can only have one criteria for Scope Value so we can do a contains value but can't add saying and also contains or not contains x.

Tags: