topic Re: Filter log by Rule Number in General Topics

Filter log by Rule Number

handiansudianto — Tue, 16 May 2023 04:39:27 GMT

Hello,

Can we filter the log by rule number? I try using 'rule:1' but no any log.

G_W_Albrecht — Tue, 16 May 2023 07:45:37 GMT

Works well for me since a long time:

Vincent_Bacher — Tue, 16 May 2023 09:19:20 GMT

I prefer right-click on a rule, copy uid and using it as filter 🙂

G_W_Albrecht — Tue, 16 May 2023 09:30:03 GMT

Should display the same results 8)

Chris_Atkinson — Tue, 16 May 2023 10:30:05 GMT

How about from the security policy view using the currentrule option to see logs for the same rule in the lower pane?

Also what time period are you searching...

Vincent_Bacher — Tue, 16 May 2023 12:28:51 GMT

rule numbers may change quickly in large organisations like ours, uid won't 🙂

handiansudianto — Wed, 17 May 2023 01:03:59 GMT

not working for me

handiansudianto — Wed, 17 May 2023 01:05:07 GMT

it's work if i open the log from security policy but not if i open the log and type rule number like rule:1