Filtering Views by Source

[biskit]

Is there a way to filter views by SOURCE?

I've set up a View and one of the infographics is for the number of detected Malware events.  This works.  But now I want to specifically only show Malware events originating internally.  I don't care (in this instance) about anything originating externally.

It seems to me that there's now way to filter on Source.  From my testing it seems I can't use object names (such as a group of internal network objects), or wildcards such as 192.168.*.*.

Does anyone know of a way to achieve this?

Or do I ask my SE to raise an "feature request" for this?

[Amir_Senn]

I suggest creating a network object (such as 192.168.0.0/16) and put it in the filter.