Log inSign upBook a demo
Tines Stories
  1. Docs
  2. Cases
  3. Searching and filtering
  1. Docs
  2. Cases
  3. Searching and filtering

Filter reference

Last updated

Use this page to look up a case search term, the properties inside it, and the operators it offers. For text matching, filter groups, and examples, see Searching and filtering.

How operators are labeled

For many filters, the listed operators depend on the number of values that can be specified:

  • Filter by single value with is or is not

  • Filter by two or more values with is any of or is none of (e.g. priority, severity)

  • Use is all of to filter for cases containing a set of values (e.g. tags, subscriber)

  • Use is empty or is not empty when values can exist in an empty state (e.g. tags, fields, assignee)

  • Date parameters use before, after, a specific range, or a relative range (e.g. last 1 week)

Case details

People

Each value list includes Current user which filters to the currently signed-in user.

Dates

Date filters use the team's working timezone, which is indicated at the bottom of the date filter menu and can be configured in your team settings.

SLAs

SLA status and SLA type are separate filters. Add both filters when a case must match a specific SLA type and status

Content

When filtering case content, use the appropriate contains operator to return the target cases:

  • contains is a basic character match (e.g. phish → spearphishing)

  • starts with is a character match to the beginning of the word (e.g. sus → suspicious)

  • ends with is a character match to the end of the word (e.g. exe → psexec.exe)

  • contains all is a match on the words, but in any order (e.g. false positive → positive result was a false alarm)

  • contains phrase is a match on the words and order (e.g. false positive → a false positive was identified)

Record filter details

The record filter checks every field on records linked to the case. The stored value must equal what you type, so Tines matches "Tines" and login does not match "login failed." The filter takes one value.

To match either of two values, put two record filters in an OR group. A record filter that matches more than 10,000 cases is rejected, requiring a more specific value.

Comment, note, and task

These parameters open properties. Add another property on the same filter when both must apply to the same comment, note, or task.

Comment author and task assignee include Current user. Completed is true or false.

Was this helpful?