Squid Black Lists Flags (sbl)

[ 1 Description ] [ 2 How does it work in the search window? ] [ 3 How does it work in LINQ? ]

Deprecated operation

This operation is deprecated and no longer supported. You will still be able to use it and add it manually to your queries, but it won’t appear in the Devo operations menu anymore. Contact us if you have any question.

Description

Labels a given domain name according to Squid Black List. If the domain is not included in the blacklist, the field will show no data.

How does it work in the search window?

Select Create field in the search window toolbar, then select the Squid Black Lists Flags operation. Only one argument is required:

Argument	Data type

Argument	Data type
Domain ^mandatory	string

The new field's data type is string.

Example

In the demo.ecommerce.data table, we want to know if the domains in the referralUri field are blacklisted.

Step 1: Get domain names

First of all, we need to extract the domain names from our referralURI field. To do it, we will use the Split operation to extract from the referralURI field only the part of the URLs that we need and we will call it uriSplit. Then, we will use the Split operation again to extract the domain names from the newly created urisplit field and we will call it uriSplit2.

Step 2: Analyze domain names using the Squid Black Lists Flags operation

Now, we will analyze the domains we extracted using the Squid Black Lists Flags operation. Select uriSplit2 as the argument and assign a name to the new field - let's call it squidBlackList.

Click Create field.

How does it work in LINQ?

Use the operator select... as... and add the operation syntax to create the new field.

sbl(domain_string)

Examples

Copy the following LINQ script and try the above example on the demo.ecommerce.data table.

from demo.ecommerce.data
select split(referralUri, "www.", 1) as uriSplit,
split(uriSplit, "/", 0) as uriSplit2,
sbl(uriSplit2) as squidBlackList