topic How to filter traffic log by non-empty user in General Topics

How to filter traffic log by non-empty user

_slv_ — Fri, 22 Nov 2013 14:27:38 GMT

Hello

How to filter traffic log by non-empty user name in Source User field?.

I have Captive Portal for uers, but some exeptions for printers and other stuff that isn't able to logon. Id like to filter traffic and get only traffic that isn't authenticated.

How to do that?

I know that I can put IP address insted of user names - but I want to know is it possible to know in that way.

Regards

SLawek

Re: How to filter traffic log by non-empty user

phild — Fri, 22 Nov 2013 14:45:39 GMT

Hi,

If you enter a traffic filter of (user.src eq '') then it will list all traffic entries with a blank username. Note it is 2 x ' not "

Regards,

Phil

Re: How to filter traffic log by non-empty user

_slv_ — Fri, 22 Nov 2013 16:54:03 GMT

Thank You, this exactly what I was looking for.

Re: How to filter traffic log by non-empty user

AGrijalba — Wed, 14 Jun 2023 07:42:18 GMT

Sorry to bring this up 10 years later, but that doesn't work anymore. This query returns no users: (user.src eq '')