Filter log by Rule Number

[handiansudianto]

Hello,

Can we filter the log by rule number? I try using 'rule:1' but no any log.

[G_W_Albrecht]

Works well for me since a long time:

[Vincent_Bacher]

I prefer right-click on a rule, copy uid and using it as filter 🙂

[G_W_Albrecht]

Should display the same results 😎

[Vincent_Bacher]

rule numbers may change quickly in large organisations like ours, uid won't 🙂

[handiansudianto]

not working for me

[Chris_Atkinson]

How about from the security policy view using the currentrule option to see logs for the same rule in the lower pane?

Also what time period are you searching...

[handiansudianto]

it's work if i open the log from security policy but not if i open the log and type rule number like rule:1