data.destination.siem.ArcSight.filters.query > add

The data.destination.siem.ArcSight.filters.query > add command allows you to add a filter to the end of the list.

Syntax

data.destination.siem.ArcSight.filters.query > add fqdn_with_wildcards

Note the following about wildcards:

• • * - zero or more domain name labels; can be on the left side only
  • # - one or more domain name labels; can be on the left side only
  • ? - exactly one domain name label; can be on the right or left side

Example

data.destination.siem.ArcSight.filters.query > add 10.36.130.1

Filter added
data.destination.siem.ArcSight.filters.query > add abc.com
Filter added