Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Shivraj_Alure
Explorer
Jump to solution

Why does "disabled" rule shows hit counts in checkpoint R77

Why does "disabled" rule shows hit counts in checkpoint R77 ?

1 Solution

Accepted Solutions
XBensemhoun
Employee
Employee

Well, maybe he rule was not always disabled so previous hits was counted.

You can verify the modification history of this rule looking for its UUID:

 - right-click on the rule and copy its UUID

 - Then, go into SmartView Tracker, Management tab

... and look at its activities filtering in Changes column

You will see its creation and every modifications.

If you want to see when the first and last hits was done, do not hesitate to use Hit count detail

Information Security enthusiast, CISSP, CCSP

View solution in original post

2 Replies
XBensemhoun
Employee
Employee

Well, maybe he rule was not always disabled so previous hits was counted.

You can verify the modification history of this rule looking for its UUID:

 - right-click on the rule and copy its UUID

 - Then, go into SmartView Tracker, Management tab

... and look at its activities filtering in Changes column

You will see its creation and every modifications.

If you want to see when the first and last hits was done, do not hesitate to use Hit count detail

Information Security enthusiast, CISSP, CCSP
Shivraj_Alure
Explorer

Thanks Xavier for your answer however in our smart dashboard we just retains logs of 7 days only. That is why I could not get anything in my filter for my disabled rule having hit counts on it. 

Anyways I appreciate your answer on this and it will help to check in my lab. 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events