Filters

Advanced Table Filtering

Harness the power of CIPPs filtering capabilities to effortlessly sift through data. Whether you're searching for a specific user or refining a larger dataset, this guide will walk you through the basic and advanced filtering techniques at your disposal.

---

1. Overview

There are two main filtering methods:

• Basic Filtering: Search for a keyword or phrase across all properties.

• Advanced Filtering: Apply specific conditions to filter data based on individual properties.

---

2. Basic Filtering

How to:

Simply type in the keyword or phrase you wish to search in the textbox.

Example:

To find all users with the name "Megan", type Megan.

---

3. Advanced Filtering

Syntax:

To utilize advanced filtering, start with the Complex: prefix (case sensitive). The general structure is:

Complex: [PROPERTY] [OPERATOR] [VALUE]; ...

Operators:

Operator	Description	Example Input
eq	Equals	Complex: department eq Marketing
ne	Not equals	Complex: city ne Pittsburgh
like	Contains the value	Complex: displayName like Megan
notlike	Does not contain the value	Complex: userType notlike Guest
gt	Greater than (for numerical values)	Complex: createdDateTime gt 2023-01-01
lt	Less than (for numerical values)	Complex: postalCode lt 20000

• PROPERTY: Indicate the property name you wish to filter on. You can find the possible properties by using the column selector button.

• OPERATOR: Use the operation you want to perform from the table above.

• VALUE: Specify the value you want to compare the property against.

You can combine multiple conditions with a semicolon (;).

Example 1:

To find users located in Pittsburgh who are members, use:

Complex: city like Pittsburgh; userType eq Member

Example 2:

To identify users who are not enabled, are members, and have a userPrincipalName containing the word "diego", you can chain the filters as:

Complex: accountEnabled eq false; userType eq Member; userPrincipalName like diego

4. Graph Filtering

Select pages support Graph Filtering, which allow you to directly use a Graph filter Query.

Syntax:

To utilize Graph filtering, start with the Graph: prefix. The general structure is:

Graph: [GRAPH QUERY STATEMENT]

A Graph query can not be combined with other filters, and requires the query to be exactly as you would use it in the $filter parameter in a graph request. For example to filter on users with an assigned license, you enter:

Graph: assignedLicenses/$count ne 0

For more information refer to the Microsoft documentation about Filtering here

5. Alert rules Filter

Alerts can be filtered using the same method as Complex filtering, allowing the same rules and operators except chaining statements together. For example to filter on logs that only have the userId 123:

UserId eq 123