Create a Post
Showing results for 
Search instead for 
Did you mean: 

Filtering Views by Source

Is there a way to filter views by SOURCE?

I've set up a View and one of the infographics is for the number of detected Malware events.  This works.  But now I want to specifically only show Malware events originating internally.  I don't care (in this instance) about anything originating externally.

It seems to me that there's now way to filter on Source.  From my testing it seems I can't use object names (such as a group of internal network objects), or wildcards such as 192.168.*.*.

Does anyone know of a way to achieve this?

Or do I ask my SE to raise an "feature request" for this?


0 Kudos
1 Reply

I suggest creating a network object (such as and put it in the filter.

Kind regards, Amir Senn
0 Kudos


Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events