...
Some important considerations
Notification Filters are by default case insensitive; we do this as CVE Database has lots of different ways vendors and products are spelled with mixed cases. This also means you can search for words with whatever typing you want, such as ‘Microsoft, ‘Microsoft,’ etc. We also support raw search; however, we think in most cases, you won’t have to do this. If raw is something you do a lot of in the future, let us know, and we will make your use case some new transformations.
Filters can use either keyword search or filter expressions.
Some examples of where it will work and not work are:
"remote code execution" is a keyword search, is allowed
vendor="Microsoft" and "remote code execution" will not work
vendor="Microsoft" and description.str.contains("remote code execution") will work
Please Note:
An empty filter returns the whole CEWL list, an empty filter means don’t filter the list.
An example
In Notification Groups Notification Groups , we had an example where a Notification Group needed to be created with Network Team name, and they needed two of their filters going to two different places. This is where Notification Filters come in.
...