type.inbound
and any(body.links, .href_url.domain.domain == "click.snapchat.com")
and sender.email.domain.root_domain != "snapchat.com"
Playground
Test against your own EMLs or sample data.
type.inbound
and any(body.links, .href_url.domain.domain == "click.snapchat.com")
and sender.email.domain.root_domain != "snapchat.com"
Test against your own EMLs or sample data.