Filters & Operators

Filter where:
├── event_name = "swap_completed"
├── AND chain = "ethereum"
└── OR (
    ├── amount_usd > 1000
    └── AND user_tier = "whale"
)

# Exact match
country is "United States"

# Exclude specific value
browser_name is_not "Safari"

# Partial match
current_url contains "/swap"
page_title contains "Dashboard"

# Check existence
wallet_address is_set      # Only Web3 users
email is_not_set           # Anonymous users

# Exact value
transaction_count equal 0          # Users with no transactions

# Comparisons
amount_usd greater_than 1000       # High-value transactions
gas_used less_than 100000          # Low gas transactions

# Range filtering
amount_usd between 100 and 10000   # Mid-tier transactions
session_duration not_between 0 and 10  # Exclude bounces

# Existence checks
token_balance is_numeric           # Has balance data

# Web3 users only
is_web3_user is_true

# Traditional Web2 users
is_web3_user is_false

# Custom boolean properties
has_completed_onboarding is_true
is_verified is_false

# Relative time filters
timestamp last 30 days             # Last month's activity
timestamp last 24 hours            # Today's events
created_at not_in_the_last 90 days # Older users only

# Date range
timestamp between "2024-01-01" and "2024-01-31"
timestamp not_between "2024-12-24" and "2024-12-26"  # Exclude holidays

# Specific date
timestamp on "2024-01-15"          # Single day
timestamp not_on "2024-01-01"      # Exclude New Year

# Before/after
timestamp before "2024-06-01"      # Before June
timestamp since "2024-01-01"       # This year only
first_seen before_the_last 365 days  # Users over a year old

# Future dates (for expiry, subscription end, etc.)
subscription_end in_the_next 30 days  # Expiring soon

# Any chain is ethereum OR polygon
chains_used any_in_list where item is "ethereum" OR item is "polygon"

# User has used any EVM chain
chains_used any_in_list where item contains "evm"

# All tags must be from approved list
tags all_in_list where item is "verified" OR item is "premium"

# Any transaction over $1000
transaction_amounts any_in_list where item greater_than 1000

# All balances are positive
token_balances all_in_list where item greater_than 0

Events where:
├── event_name is "swap_completed"
├── AND chain is "ethereum"
├── AND amount_usd greater_than 100
└── AND timestamp last 7 days

→ Only Ethereum swaps over $100 in the last week

Users where:
├── plan is "pro"
└── OR total_transactions greater_than 100

→ Pro users OR users with 100+ transactions

Events where:
├── event_name is "swap_completed"
└── AND (
    ├── chain is "ethereum"
    └── OR chain is "arbitrum"
)
└── AND (
    ├── amount_usd greater_than 1000
    └── OR user_tier is "whale"
)

→ Swaps on Ethereum or Arbitrum that are either 
   high-value ($1000+) or from whale users

Events:
├── event_name is "swap_completed"
├── Properties:
│   ├── input_token is "ETH"
│   ├── AND output_token is "USDC"
│   └── AND slippage less_than 1

Users:
├── plan is "pro"
├── AND country is "US"
├── AND is_web3_user is_true
└── AND wallet_address is_set

Transactions:
├── chain is "ethereum"
├── AND contract_name is "Swap Router"
├── AND method_name is "swapExactTokensForTokens"
└── AND value greater_than 0

Users:
├── IN cohort "Power Users"
└── AND NOT IN cohort "Churned Users"

Time Range: Last 30 days
Granularity: Daily

OR

Custom Range: Jan 1, 2024 - Jan 31, 2024
Granularity: Weekly

✅ Good: event_name is "swap_completed" AND chain is "ethereum"
❌ Vague: event_name contains "swap"

✅ For exact match: is / equal
✅ For ranges: between / greater_than
✅ For text search: contains

❌ Using contains for exact values
❌ Using is for partial matches

# High-value users: Pro plan OR whale behavior
Users where:
├── plan is "pro"                    # Paying customers
└── OR (
    ├── total_volume greater_than 100000  # High volume
    └── AND transaction_count greater_than 50  # Active
)