Overview
A more complex multi-line filter. It allows complex include/exclude matching for text and IP addresses. By including multiple quoted search strings, it allows for Boolean operations on the search strings.
Allows for AND, OR, NOT-OR, NOT-AND and exclusion matching.
Details
The complex filter allows you to specify multiple search strings. Search strings can be linked together in the form of [(A or B) and (C or D)] but not [(E or F) and (G or H)].
Each search string must be contained by double quotes. Multiple quoted search strings can be placed next to each other on the same line. The filter will then match any of the strings specified. This is an implicit OR relationship.
The [C] button selects a case sensitive or case in-sensitive string search.
The [S] button selects a sub-string search or an exact, whole string match.
The filter matching process will ignore any blank fields.
Leaving the first two fields blank and specifying text in the third and or fourth fields can perform exclusion matching. In this case, if the text is NOT matched the result will be true.
Examples:
Notice the [S] button is pressed, indicating a sub-string search. This means the search strings can appear anywhere in the text.
All strings must be contained in double quotes. Items can be listed next to each other and will be OR'd together.
The filter above reads as:
If any of the message text contains the text "fox" or "quick" or "hello" and also contains "over" or "the", but does not contain "hello" and "brown" (in upper or lower case), the filter will be true.
This is an example of an exclusion filter:
If the text does NOT contain the words "chicken" or "duck" then the result will be true.
Notice the first two fields are left blank. These fields will be ignored during the filter processing.
Notes:
The "And:" fields can be left blank if they are not required.
If the "And:" fields contain values, the field above it must also contain data.