You can use basic and complex queries to perform searches on the NDR appliance. A query contains both terms and operators.
There are two types of query terms: single terms and phrases. Denied or allowed are examples of single terms. A phrase is a group of words surrounded by double quotes, like “please read this email”.
Note
Combine multiple terms or phrases together with Boolean operators and special characters to form a more complex query.