Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
ahmed_aburaihan
Explorer
Jump to solution

Filtering logs based on number of entries (source and destination)

Hallo dear Seniors and Juniors 

 

I am using Smartview to get Logs for a specific time period (for example from Date to Date). 

I want that if the LOGS are generated for the same Source and Destination more than one time, it should not be shown. 

Is there any nice query which could do that? 

 

 

Thank you. 

AAA.

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

For future logs...you can ensure the relevant rules logs by Session (instead of by Connection).
Even with that, I suspect you won't be able to suppress all the logs.

View solution in original post

4 Replies
PhoneBoy
Admin
Admin

For future logs...you can ensure the relevant rules logs by Session (instead of by Connection).
Even with that, I suspect you won't be able to suppress all the logs.

the_rock
Legend
Legend

Hey Ahmed,

What @PhoneBoy said is exactly the way to do it. I worked with a client few years back who inquired about the same and TAC actually gave them this answer. Not sure if there is alternate method of doing this, but this is what Im also aware of.

Best,

Andy

emmap
Employee
Employee

Anything beyond that would involve exporting the logs to CSV and using external tools to do your filtering/compressing.

ahmed_aburaihan
Explorer

Hi @emmap 

I actually did the same (ms excel), thank you for the comment. 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.