Forum Discussion

Mosh's avatar
Mosh
Icon for Professor rankProfessor
7 years ago

How to use the ~ (includes) filter operator?

Hi, I need to retrieve alerts by a list of alert IDs.  I thought maybe the includes ~ operator in the filter would be the way to do this, passing a comma separated list of alert IDs: /al...
rest api
Jesse_D's avatar
Jesse_D
6 years ago

I was trying to do an OR operator as well but in the audit/accesslogs. Mike's comment made me think of using the network tab of the developer tools in Firefox.

The browser uses this: 

username:"user1@test.com"|"user2@test.com",_all~SAML

It also works without quotes: 

username:user1@test.com|user2@test.com,_all~SAML