Rule name with double spaces - log view detail with single space

Nogaro-STMicro — Fri, 25 Oct 2024 06:39:42 GMT

Hello, I received a query from our SOC about log viewing for a Rule that has 2 spaces in the name (yes created with typo).

When checking logs for that rule, in the rule details the double space is reverted to a single space.

Whilst not a problem (fix the typo!), just wondering why there is a difference between the Rule name & Monitoring filter (actual name syntax required for parsing) and the Log Detail, where the double space is no longer present.

Thanks in advance to anyone answering such a non-issue 😄

Re: Rule name with double spaces - log view detail with single space

ozheng — Fri, 03 Jan 2025 09:24:00 GMT

Hello @Nogaro-STMicro

Just an assumption, I suppose there is some input validation which cleared the double space.

Olivier

topic Rule name with double spaces - log view detail with single space in Panorama Discussions

Rule name with double spaces - log view detail with single space

Re: Rule name with double spaces - log view detail with single space