topic Re: Audit Log Search for Deleted Networks in General Topics

Audit Log Search for Deleted Networks

ChckPnt82 — Wed, 15 May 2024 12:08:01 GMT

I am trying to search the audit logs to see if a network was previously deleted. I do not know what the name would have been. Is there a way to search the audit logs?

Example would be objecttype:Network AND operation:"Delete Object" AND ip_address:"10.10.10.*"

I have not been able to figure out the last filter.

Re: Audit Log Search for Deleted Networks

the_rock — Wed, 15 May 2024 12:47:42 GMT

Does anything come up if you simply search by IP? Say ip was 10.10.10.10, you just type it as is, nothing else.

Andy

Re: Audit Log Search for Deleted Networks

ChckPnt82 — Wed, 15 May 2024 12:52:25 GMT

Thank you! Sometimes the simplest option is the solution.

Re: Audit Log Search for Deleted Networks

the_rock — Wed, 15 May 2024 12:54:45 GMT

Of course! We are here to help each other, glad that solved it for you.

Best,

Andy