cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Smart Event Report Filter

hi,

We are trying to generate the report where we can discard the specific event ( ip fragmentation) for internal lan ip but we need the event report (ip fragmentation) for other external ip (public IP). Is it possible? We tried with the filter option but all ip fragmentation event from report were excluded which was not the desire output.

Regards,

Sagar Manandhar

0 Kudos
2 Replies
Highlighted
Admin
Admin

Re: Smart Event Report Filter

Seems like you should be able to filter this out.

What did your filter look like?

Screenshots helpful.

Employee+
Employee+

Re: Smart Event Report Filter

Would a filter similar to below work?

(src:internal_network NOT "IP Fragmentation") OR (NOT src:internal_network AND "IP Fragmentation")