Squid Black Lists Flags (sbl)

Description

Labels a given domain name according to Squid Black List. If the domain is not included in the blacklist, the column will show no data.

How does it work in the search window?

Select Create column in the search window toolbar, then select the Squid Black Lists Flags operation. Only one argument is required:

The new column's data type is string. 

Example

In the demo.ecommerce.data table, we want to know if the domains in the referralUri column are blacklisted.

Step 1: Get domain names

First of all, we need to extract the domain names from our referralURI column. To do it, we will use the Split operation to extract from the referralURI column only the part of the URLs that we need and we will call it uriSplit. Then, we will use the Split operation again to extract the domain names from the newly created urisplit column and we will call it uriSplit2.

Step 2: Analyze domain names using the Squid Black Lists Flags operation

Now, we will analyze the domains we extracted using the Squid Black Lists Flags operation. Select uriSplit2 as the argument and assign a name to the new column - let's call it squidBlackList.

Open

Click Create column and you will see the following result:

Open

How does it work in LINQ?

Use the operator select... as...  and add the operation syntax to create the new column. 

• sbl(domain_string)

Examples

Copy the following LINQ script and try the above example on the demo.ecommerce.data table.