<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Filtering Systemlog in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/filtering-systemlog/m-p/21755#M15890</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;yes, you are right.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;But it does not work like "contains". Contains is something like "Wildcard"&lt;/P&gt;&lt;P&gt;"contain" gives back true when searching for ABC in hjkhjkABChjkhjk&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;"IS PRESENT" not. You can not put a value in value column there.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;So I can not look for every line starting e.g with "ABC nnnmnm" or "ABC dwwwww"&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Roman&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 28 Jul 2014 11:16:29 GMT</pubDate>
    <dc:creator>rkra</dc:creator>
    <dc:date>2014-07-28T11:16:29Z</dc:date>
    <item>
      <title>Filtering Systemlog</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/filtering-systemlog/m-p/21753#M15888</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I'd like to filter the log in order to get lines containing e.g. "BSS".&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;It works when filtering the description column :&amp;nbsp; ( description &lt;SPAN style="color: #ff0000;"&gt;contains&lt;/SPAN&gt; 'IKE protocol IPSec SA delete message received from peer. SPI:0xAB229BB0.' )&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;It works when filtering the object column:&amp;nbsp; ( object eq P1_012_&lt;STRONG style="color: #ff0000;"&gt;BSS&lt;/STRONG&gt;_EISEN )&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;It does not work when filtering with "CONTAINS" ( object &lt;SPAN style="color: #ff0000;"&gt;contains&lt;/SPAN&gt; P1_012_&lt;STRONG style="color: #ff0000;"&gt;BSS&lt;/STRONG&gt;_EISEN )&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Roman&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 22 Jul 2014 10:27:42 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/filtering-systemlog/m-p/21753#M15888</guid>
      <dc:creator>rkra</dc:creator>
      <dc:date>2014-07-22T10:27:42Z</dc:date>
    </item>
    <item>
      <title>Re: Filtering Systemlog</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/filtering-systemlog/m-p/21754#M15889</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello Roman,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;It is working as expected because when filtering &lt;STRONG&gt;Objects&lt;/STRONG&gt; you have 3 options [equal, not equal and is present] and with &lt;STRONG&gt;Description&lt;/STRONG&gt; you have only [contains]. &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Here is how you can view your available options (click on the 'plus' sign on the right hand side top corner):&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;IMG alt="" class="image-0 jiveImage" src="https://live.paloaltonetworks.com/legacyfs/online/14632_pastedImage_0.png" style="max-width: 1200px; max-height: 900px;" /&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;IMG alt="" class="image-1 jiveImage" src="https://live.paloaltonetworks.com/legacyfs/online/14633_pastedImage_1.png" style="max-width: 1200px; max-height: 900px;" /&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Hope that helps!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks and regards,&lt;/P&gt;&lt;P&gt;Kunal Adak&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 22 Jul 2014 14:09:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/filtering-systemlog/m-p/21754#M15889</guid>
      <dc:creator>kadak</dc:creator>
      <dc:date>2014-07-22T14:09:58Z</dc:date>
    </item>
    <item>
      <title>Re: Filtering Systemlog</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/filtering-systemlog/m-p/21755#M15890</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;yes, you are right.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;But it does not work like "contains". Contains is something like "Wildcard"&lt;/P&gt;&lt;P&gt;"contain" gives back true when searching for ABC in hjkhjkABChjkhjk&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;"IS PRESENT" not. You can not put a value in value column there.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;So I can not look for every line starting e.g with "ABC nnnmnm" or "ABC dwwwww"&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Roman&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 28 Jul 2014 11:16:29 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/filtering-systemlog/m-p/21755#M15890</guid>
      <dc:creator>rkra</dc:creator>
      <dc:date>2014-07-28T11:16:29Z</dc:date>
    </item>
  </channel>
</rss>

