Is there a way to filter views by SOURCE?
I've set up a View and one of the infographics is for the number of detected Malware events. This works. But now I want to specifically only show Malware events originating internally. I don't care (in this instance) about anything originating externally.
It seems to me that there's now way to filter on Source. From my testing it seems I can't use object names (such as a group of internal network objects), or wildcards such as 192.168.*.*.
Does anyone know of a way to achieve this?
Or do I ask my SE to raise an "feature request" for this?