AQL – How to do “field contains another field” condition

We would need to use the “STRPOS” function.

AND when the event matches STRPOS(LOWER("Sender Domain"), LOWER("h from domain"))==-1 AQL filter query

This would mean that if “h from domain” is NOT contained in “Sender Domain”, returns a match. -1 means that the substring is not contained in the main string.