Squid Black Lists Flags (sbl)
Labels a given domain name according to Squid Black List. If the domain is not included in the blacklist, the column will show no data.
How does it work in the search window?
Select Create column in the search window toolbar, then select the Squid Black Lists Flags operation. Only one argument is required:
The new column's data type is string.
demo.ecommerce.data table, we want to know if the domains in the referralUri column are blacklisted.
Step 1: Get domain names
First of all, we need to extract the domain names from our referralURI column. To do it, we will use the Split operation to extract from the referralURI column only the part of the URLs that we need and we will call it uriSplit. Then, we will use the Split operation again to extract the domain names from the newly created urisplit column and we will call it uriSplit2.
Step 2: Analyze domain names using the Squid Black Lists Flags operation
Now, we will analyze the domains we extracted using the Squid Black Lists Flags operation. Select uriSplit2 as the argument and assign a name to the new column - let's call it squidBlackList.
Click Create column and you will see the following result:
How does it work in LINQ?
Use the operator
as... and add the operation syntax to create the new column.
Copy the following LINQ script and try the above example on the
from demo.ecommerce.data select split(referralUri, "www.", 1) as uriSplit, split(uriSplit, "/", 0) as uriSplit2, sbl(uriSplit2) as squidBlackList