How to exclude Internal FW logs as source when I edit General Overview view in Smart Console R80.40

[FM]

Can you help me on how I can exclude Internal FW logs as source when I edit General Overview or a custom dashboard view in Smart Console R80.40

We are trying to add checkpoint General Overview dashboard to MCAS console (Microsoft Cloud App Security) an we are asked to exclude Internal FW and only include External FW logs or events.

[PhoneBoy]

I assume you’d add a filter like “not origin:internalFW” or similar?

[FM]

Is the filter “not origin:internalFW” for the gui?

Can you use an Image such as the attached screen capture of the gui to explain?
Thanks

[PhoneBoy]

I was speaking in terms of SmartView logs view
But for reports, I believe you’re on the right track.

[FM]

What is the value i put in the box after 'Not Equals' parameter - refer to the screenshot i attached earlier
Field 'Orgin'
Not Equals 

Should i put 'internalFW'

Thanks

[PhoneBoy · Accepted solution]

The precise name of the gateway listed in logs you wish to exclude.