Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Sagar_Manandhar
Advisor

Smart Event Report Filter

hi,

We are trying to generate the report where we can discard the specific event ( ip fragmentation) for internal lan ip but we need the event report (ip fragmentation) for other external ip (public IP). Is it possible? We tried with the filter option but all ip fragmentation event from report were excluded which was not the desire output.

Regards,

Sagar Manandhar

0 Kudos
2 Replies
PhoneBoy
Admin
Admin

Seems like you should be able to filter this out.

What did your filter look like?

Screenshots helpful.

Matt_Ricketts
Employee
Employee

Would a filter similar to below work?

(src:internal_network NOT "IP Fragmentation") OR (NOT src:internal_network AND "IP Fragmentation")

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events