topic Re: Is there a list of options / filters I can use in the Web GUI ? in General Topics

Is there a list of options / filters I can use in the Web GUI ?

PatrickD — Thu, 30 May 2013 12:34:44 GMT

Hi,

Is there a list, a document that would explain how I can use filters in the Web GUI ? I know how to apply simple filters by clicking on a field -> filter, but I would like to use more advanced features.

As exemples :

- (tag/member eq 'TEST') will list all security policies that have "TEST" in their TAG list. How can I negate that so that only rules that don't have the TAG "TEST" would be listed ?

- How can I filters my policies so I only list disabled or enabled rules ?

- ( receive_time leq '2013/05/30 07:43:00' ) will return all log events that have occured before 7:43. What if I want everything that have occured AFTER 07:43 ?

Thank you!

Re: Is there a list of options / filters I can use in the Web GUI ?

Retired Member — Thu, 30 May 2013 12:42:41 GMT

ı don't know if there is a guide.

You can use ! to negate all of the thing in brackets

Ex: !( addr.src in 10.1.1.10 )

Ex ( receive_time geq '2013/05/30 07:43:00' )

Re: Is there a list of options / filters I can use in the Web GUI ?

VinceM — Thu, 30 May 2013 12:54:32 GMT

Hi,

Best thing if don't know the syntax can be to use the "filter add" option - small + on the top righ corner in Monitor/traffic.

Re: Is there a list of options / filters I can use in the Web GUI ?

PatrickD — Thu, 30 May 2013 13:23:32 GMT

Thanks for the hint! This will help me build my queries. I was working in my policies where the option to add a filter is simply not there.

Re: Is there a list of options / filters I can use in the Web GUI ?

PatrickD — Thu, 30 May 2013 13:24:59 GMT

Thanks. I did tried the use of !, and I though it was not working. It actually work, but not exactly as I would like. I'll keep searching, but I should be able to figure it out now.