Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
handiansudianto
Collaborator

Filter log by Rule Number

Hello,

 

Can we filter the log by rule number? I try using 'rule:1' but no any log.

0 Kudos
7 Replies
G_W_Albrecht
Legend
Legend

Works well for me since a long time:

rule_1.png

CCSE CCTE CCSM SMB Specialist
0 Kudos
Vincent_Bacher
Advisor
Advisor

I prefer right-click on a rule, copy uid and using it as filter 🙂

 
 

 

and now to something completely different - CCVS, CCAS, CCTE, CCCS, CCSM elite
0 Kudos
G_W_Albrecht
Legend
Legend

Should display the same results 😎

CCSE CCTE CCSM SMB Specialist
0 Kudos
Vincent_Bacher
Advisor
Advisor

rule numbers may change quickly in large organisations like ours, uid won't 🙂

and now to something completely different - CCVS, CCAS, CCTE, CCCS, CCSM elite
0 Kudos
handiansudianto
Collaborator

not working for me

Capture.PNG

0 Kudos
Chris_Atkinson
Employee Employee
Employee

How about from the security policy view using the currentrule option to see logs for the same rule in the lower pane?

Also what time period are you searching...

CCSM R77/R80/ELITE
0 Kudos
handiansudianto
Collaborator

it's work if i open the log from security policy but not if i open the log and type rule number like rule:1

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events