Filter Data

DeviceLock Enterprise Manager provides very sophisticated data filtering, enabling you to narrow a scan or comparison result to only those data complying to your specific conditions.

To open the Filter Data dialog box, you can select Filter from the View menu or press the appropriate button on the Main toolbar. Please note that the window with a scan or comparison result must be active to use data filtering.

§ The Field column contains all the fields available in the scan or comparison result that you want to filter. You can define the AND-OR logic for each field separately:

AND - includes only those records that comply with all defined conditions. For example, Process = "explorer.exe" AND PID = 3764 retrieves all data where both the Process is "explorer.exe" and PID is 3764. It does not include data where the Process is "explorer.exe" and PID is not 3764 or where PID is 3764 but Process is not "explorer.exe".

OR - includes all records that comply with at least one condition. For example, Process ="explorer.exe" OR PID = 3764 retrieves all data having one or both conditions, where Process = "explorer.exe" (no matter what PID is) or where PID is 3764 (no matter what Process is).

§ The Condition column contains a list of logical operations that can be performed on a selected field. You can select only one logical operation for each field. DeviceLock Enterprise Manager supports two groups of logical operations, those for string data and non-string data.

Logical operations that can be performed on string data (target string being the string you specify, e.g. "Explorer.exe"):

- Is (exactly) - selects only data having fields with strings that are identical to the target string.

- Includes - selects only data having fields with strings that include a defined target string.

- Is not - selects only data having fields with strings that are different from the target string.

- Not includes - selects only data having fields with strings that do not include the target string.

- Empty - selects only data having fields with empty strings.

- Not Empty - selects only data having fields with strings that are not empty.

- Regular expression - selects only data having fields with strings matching an expression. The expression may contain wildcards (e.g. "explorer*").

If you want to narrow the search to the string's exact case (e.g. "Explorer.exe" is different from "explorer.exe"), check the Match case flag. Otherwise, case is ignored (e.g. "Explorer.exe" and "explorer.exe" are identical).

Logical operations that can be performed on non-string data:

- Equal to (=) - selects data having field values that are identical to the defined value (e.g. PID = 3764).

- Greater than (>) - selects data having field values that are greater than the defined value (e.g. PID > 4).

- Less than (<) - selects data having field values that are less than the defined value (e.g. PID < 4).

- Not Equal to (!=) - selects data having field values that are different from the defined value (e.g. PID != 0).

- Between (in) - selects data having field values that are between the two defined values (e.g. PID in 3000-4000).

- Not Between (out) - selects data having field values that are outside of the two defined values (e.g. PID out 3000-4000).

- Regular expression - selects only data having field values matching an expression. The expression may contain wildcards (e.g. 300*).

If you don't want to perform a logical operation for a field, select Not defined from the list of logical operations.

§ Value columns contain user-defined arguments. The second Value column is used only when the Between (in) or Not Between (out) logical operation is selected. For all other logical operations only the first Value column is needed.

After you define a filtering expression, press the Apply button to start the filtering process.

You can save a filtered result in an external ANM file or export it to a text file (TXT and CSV) or MS Excel. Select Save As in the File menu or press the appropriate button on the Main toolbar to save or export the filtered result.

As with any other DeviceLock Enterprise Manager file, filtered data can be opened and loaded into DeviceLock Enterprise Manager. To load a file, select Open in the File menu or press the appropriate button on the Main toolbar. Then specify the file you wish to open. You can only load files that were previously saved by DeviceLock Enterprise Manager.