Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Arend
Contributor

Log Filter does not exclude after "Add to Filter: NOT ....."

Hi,

R81.10 for gateway and security mgr srv

I try to filter out a specific address (10.250.248.68) but it does not seem to work for this customer environment.

Do you have experience with logs still showing up after you filter it out.

query: 10.253.70.128/24  NOT 10.250.248.68 NOT 10.250.248.69 NOT 10.0.74.137  NOT 192.168.20.14 NOT dst:10.250.51.17

See screenshot.

 

0 Kudos
3 Replies
G_W_Albrecht
Legend
Legend

Query Syntax gives: NOT <field>: <value>

You need to specify the field for NOT...

CCSE CCTE CCSM SMB Specialist
0 Kudos
Arend
Contributor

hi,

thank you for the response. Even with the <field> addition of "dst:" the logging still shows the "NOT" IP address.

0 Kudos
G_W_Albrecht
Legend
Legend

Works very well for me:

172.27.39.0/24 NOT src:192.168.105.1

1. 172.27.39.0/24

Including Reini.png

2. We exclude host Reini - 172.27.39.0/24 NOT src:192.168.105.1

Excluding Reini.png

3. not not..

notnot.png

CCSE CCTE CCSM SMB Specialist
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events