Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Participant

Searching zero hits rules in R80.10

Jump to solution

Hi,

Prior to R80.10 you could find every rule with zero hits right from the search bar. For instance, in R77.30 you could see only the rules with no hits this way:

Now in R80.10 I can't find the way to do that search. In "Searching a Rule Base" page in SmartConsole R80.10 Help there are no clues about it.

Is there a way to do this search?


Greetings.

Labels (1)
Tags (2)
1 Solution

Accepted Solutions
Highlighted

Hi,

This is a limitation of R80.10 and R80.20.

We plan to have it back in our next releases.

No need for RFE on a thing that we had before.

The short-term alternative is using the API. But we are aware that isn't ideal.

Thank you for this feedback.

View solution in original post

17 Replies
Highlighted
Admin
Admin

You can script the disabling or deletion of said rules with the API.

See: Disable/Delete Rules with a Zero Hit Count (MDS or SMS)

0 Kudos
Highlighted
Participant

Thanks. This can be a very useful script (and a nice starting point to work with advanced CLI commands) but it's not what I need, a way of search visually those rules as it was in previous versions.

Highlighted
Admin
Admin

I'm not aware of a way to do it visually with SmartConsole.

I'm guessing it's because there's no way currently to query the rulebase based on hit count in the API.

The API can return the hits associated with a given rule, which is what the script I referred to actually does.

Possible RFE Tomer Sole‌?

Highlighted
Collaborator

Hi -

 

You can enable hit option on top.

then type the disable list in search tab, it will see your all disable rules.

 

Regards

Abhishek

Highlighted
Explorer

Hey - how exactly do you do that ?

Highlighted
Explorer

hey,
how exactly do you do that ?
kr
Zeljko

0 Kudos
Highlighted

Hi,

This is a limitation of R80.10 and R80.20.

We plan to have it back in our next releases.

No need for RFE on a thing that we had before.

The short-term alternative is using the API. But we are aware that isn't ideal.

Thank you for this feedback.

View solution in original post

Highlighted
Participant

Hi,

This was 2018! Can you tell me in which version the feature is added? Or will be added?

Thanks,

Frank

 

Highlighted
Explorer
Hi all,

I have two questions:

1. Will this feature be added in future versions?
2. The API only disables/deletes rules with 0 hits or also lists before which it will disable/delete? In my case I just want to list the rules with 0 hits and decide for myself which ones to disable/delete.

Thank you in advance.

Regards.
Highlighted
Collaborator

Any news? Feature seems still not available in R80.30... 😶

Highlighted
Contributor

When is it coming?

0 Kudos
Highlighted

any news?

0 Kudos
Highlighted
Participant

Please do bring this back!

🙂

Thanks

Jamie

Highlighted
Contributor

In these unprecedented times it would be nice if this worked. 

Highlighted
Collaborator

Just a reminder. Feature still missing in R80.40. 😳

Highlighted
Employee+
Employee+

Hi all, thanks for heads up, we're working to bring this back to SmartConsole, stay tuned...

But rulebase analysis and cleanup can be done today. we have awesome tool called PolicyCleanUp  which allows automatic cleanup of your policy based on hits count.

The tool runs on a policy and a domain that you named. If a rule was not hit for the number of days that you configured, the rule is a candidate to be disabled.
If a rule is disabled for the number of days that you configured, the rule is a candidate to be deleted.
You can adjust the code according to your organization’s policy / needs. This tool can be executed on Management Server / Multi-Domain servers of version of R80.10 and up.

Highlighted
Collaborator

Hi,

searching/sorting hit counters is also interesting while troubleshooting, not only for deleting cleanup rules. Not sure why there is always a need to install/add scripts to bring back several features from R77 back to R80.  (e.g. clone admin account;revision control; workflow)

b.t.w. the feature is also not visible in R81 public EA

Best Regards