Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
BusasrdM
Explorer

how to view unique source ip in custom reports

Good morning,

 

I recently built a report to show accepted traffic that hits on specific rule.

in this report i used a table show show log entries for users accessing two /24 subnets by passing on that rule.

 

i put a custom filter on the table data like dst: 192.169.xxx.0/24 AND service: <servicename>

 

the data comes back with duplicates due to the users making several connections thru out the day.

 

 

is there a way to only get unique data to populate in a tables vs.  Mary Joe's 16 connections thru out the day?

 

Mike

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

What report are you using as the basis for this?

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events