Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Timothy_Hall
MVP Gold
MVP Gold

Customize Field/Column Suggestions for Log Search?

So here is a bit of an interesting question: on the Logs & Events tab in the SmartConsole, when you click into the search field or start typing in it, Field/Column autocomplete suggestions appear below in blue and can be clicked to be inserted into your search string. 

Is there any way to customize these suggestions?  Maybe remove some and add some?  It doesn't seem possible from what I can see. I've attached a screenshot of what I want to customize below.  I realize you can construct a Favorite Query search and save it under Queries, but that's not what I'm after.  I also know that you can click "Other Fields:" to access all the other fields not shown as suggestions, but can I add some of those to the visible blue suggestions?

suggestions.png

New Book: "Max Power 2026" Coming Soon
Check Point Firewall Performance Optimization
5 Replies
the_rock
MVP Diamond
MVP Diamond

Hi Tim,

Maybe someone else can confirm for sure, but Im failrly positive those are hard coded and cant be changed.

Best,
Andy
"Have a great day and if its not, change it"
0 Kudos
genisis__
MVP Silver
MVP Silver

I did not think you can add custom field.

the_rock
MVP Diamond
MVP Diamond

I am pretty sure you are 100% right. I looked everywhere, dont see that being a possibilit.

Maybe @Amir_Senn can confirm for us?

Best,
Andy
"Have a great day and if its not, change it"
0 Kudos
Amir_Senn
MVP Silver CHKP MVP Silver CHKP
MVP Silver CHKP

This fields come from enumsConfig.xml. Technically I think it might work but I wouldn't suggest it. Maybe on lab environments.

My suggestion is to use favorite queries instead. Just save all the queries you often use and use from there.

Kind regards, Amir Senn
Timothy_Hall
MVP Gold
MVP Gold

OK thanks, it was a random question brought up by a CCSA class attendee.

New Book: "Max Power 2026" Coming Soon
Check Point Firewall Performance Optimization
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events