Filter Tab

Use the Filter tab to filter IMF events by IP address, host name or domain (sender or recipient). It contains two drop-down list boxes: Attribute, and operator. You can enter a value in the third field.

To add a new criterion, click the next (blank) line and then enter the name of a domain, or click the button to browse the list of domains already known in the database.

How to set a filter

The example below shows how to filter IMF events whose sender domain name contains 'spam.com'.

Selections can be separately saved as selection settings before you record your custom report. You will then be able to reuse them later on.

You can make, change, clear or save your selection using the following buttons:

Option	Description
All events	All events will be included in the report.
Some events	Filter specific events by IP address, host name or domain (sender or recipient).
	Clear the selected filter.
	Clear all displayed filters.
	Save your set of filters if you need to reuse it in another custom report. See Selection settings.
	Select a previously saved set of filters.

For more information about filtering options, see Using filters.

of