Having hit this sort of problem too many times, I now recommend a DNS style FQDN in all my click-stream data. The domain stored as ".com.google.mail" etc. Thi

Having hit this sort of problem too many times, I now recommend a DNS style FQDN in all my click-stream data. The domain stored as ".com.google.mail" etc. This breaks down a lot of these sort of queries with a simple enough '.com.google%' filter and which gets evaluated internally even on min-max zones. Gets turned into ">= '.com.google.' and <= '.com.google.\u0ff'" in byte comparisons. Even then it doesn't really help with the array syntax - because the condition doesn't get pushed there.