Log Filter does not exclude after "Add to Filter: NOT ....."

[Arend]

Hi,

R81.10 for gateway and security mgr srv

I try to filter out a specific address (10.250.248.68) but it does not seem to work for this customer environment.

Do you have experience with logs still showing up after you filter it out.

query: 10.253.70.128/24  NOT 10.250.248.68 NOT 10.250.248.69 NOT 10.0.74.137  NOT 192.168.20.14 NOT dst:10.250.51.17

See screenshot.

[G_W_Albrecht]

Query Syntax gives: NOT <field>: <value>

You need to specify the field for NOT...

[Arend]

hi,

thank you for the response. Even with the <field> addition of "dst:" the logging still shows the "NOT" IP address.

[G_W_Albrecht]

Works very well for me:

172.27.39.0/24 NOT src:192.168.105.1

1. 172.27.39.0/24

2. We exclude host Reini - 172.27.39.0/24 NOT src:192.168.105.1

3. not not..