Checkpoint VSX log don't filter the origin virtual system name

[apara]

Checkpoint VSX log don't filter the virtual system name origin, if i search for destination and/or source i see the gateway name on origin, but if i want use the filter on Origin, i don't find the virtual system

It's Gaia 80.30

What could be the problem?

[PhoneBoy]

You can only filter/search on fields that we index.
The origin field is not currently indexed.

[PhoneBoy]

I've been told by R&D this field should be indexed and thus should be filterable/searchable.
Best to open a TAC case,

[Maarten_Sjouw]

Keep in mind that the origin includes the cluster member name and the vs name. You cannot filter on the vs name only.

[Dan_Zada]

Hi,

Searching by the vs name should work. You just need to type: "origin:VSNAME".

If it does not work for you, please contact me.

Thanks!

Dan.

[Arne_Boettger]

Hello,

I just came across this thread because I have a similiar issue. In every report, the Origin is included as vsxgateway_vsname, leading to reports which are difficult to read.

Is there a way to apply a text replacement to the report, to crop away the VSX cluster member name? I don't care if the log is from vsxgateway01_customerA or vsxgateway02_customerA, but rather if it is from customerA or customerB.

Kind regards, Arne