Hi There
Using R80.30 Take 191
I have seen the example in sk122323 about the FilterConfiguration.xml.
Using the example below by editing $EXPORTERDIR/targets/<target-name>/conf/FilterConfiguration.xml
<filters>
<filterGroup operator="and">
<field name="action" operator="and">
</field>
<field name="origin" operator="and">
</field>
<field name="product" operator="or">
<value operation="eq">SmartDefense</value>
<value operation="eq">Threat Emulation</value>
</field>
<field name="severity" operator="or">
<value operation="eq">3</value>
<value operation="eq">4</value>
</field>
</filterGroup>
</filters>
But when I restart the cp_log_export service, all changes are gone and the file "FilterConfiguration.xml" is "empty" again as before? Anymore any idea why this file gets "reset" be the restart of the service?