Squid Black Lists Flags (sbl)
Labels a given domain name according to Squid Black List. If the domain is not included in the blacklist, the column will show no data.
How does it work in the search window?
Select Create column in the search window toolbar, then select the Squid Black Lists Flags operation. Only one argument is required:
The new column's data type is string.
We want to get the descriptions associated with the HTTP status codes in the statusCode column, so we click Create column and select the HTTP Status Description operation. Select statusCode as the argument and assign a name to the new column - let's call it statusCodeDesc.
Step 1: Get domain names
First of all, we need to extract the domain names from our referralURI column. To do it, we will use the Split operation twice to extract only the part of the URLs that we need. We call the columns uriSplit and uriSplit2.
Step 2: Analyze domain names using the Squid Black Lists Flags operation
Now, we will analyze the domains we extracted using the Squid Black Lists Flags operation. Select uriSplit2 as the argument and assign a name to the new column - let's call it squidBlackList.
Click Create column and you will see the following result:
How does it work in LINQ?
Use the operator
as... and add the operation syntax to create the new column.
Copy the following LINQ script and try the above example on the