Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
BusasrdM
Explorer

how to view unique source ip in custom reports

Good morning,

 

I recently built a report to show accepted traffic that hits on specific rule.

in this report i used a table show show log entries for users accessing two /24 subnets by passing on that rule.

 

i put a custom filter on the table data like dst: 192.169.xxx.0/24 AND service: <servicename>

 

the data comes back with duplicates due to the users making several connections thru out the day.

 

 

is there a way to only get unique data to populate in a tables vs.  Mary Joe's 16 connections thru out the day?

 

Mike

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

What report are you using as the basis for this?

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events