Hi community,
starting form a custom commands that returns a list of hostnames, I have the need to filter out:
In order to do so I'm trying different versions but I can't get the result I want.
With this search I can olny get these domain=domain1 hostname IN ("host1*","host2*") but all the hostname in a different domain than domain2 and domain3 are missing.
| getfe
| search platform != "osx" (domain =domain1 hostname IN ("host1*","host2*"))
| append
[search NOT domain IN ("domain2", "domain3", "domain1")]
Can you please help me? I know I'm missin
Thanks a lot
Marta
what about an OR condition ?
( platform != osx )
AND
( ( domain NOT IN ("domain2", "domain3") OR ( domain=domain1 hostname IN ("host1*","host2*") ) )
what about an OR condition ?
( platform != osx )
AND
( ( domain NOT IN ("domain2", "domain3") OR ( domain=domain1 hostname IN ("host1*","host2*") ) )
Yeah, actually I complicated my self....though of the OR condition this morning 😄
Thanks anyway!