11-22-2013 06:27 AM
Hello
How to filter traffic log by non-empty user name in Source User field?.
I have Captive Portal for uers, but some exeptions for printers and other stuff that isn't able to logon. Id like to filter traffic and get only traffic that isn't authenticated.
How to do that?
I know that I can put IP address insted of user names - but I want to know is it possible to know in that way.
Regards
SLawek
11-22-2013 06:45 AM
Hi,
If you enter a traffic filter of (user.src eq '') then it will list all traffic entries with a blank username. Note it is 2 x ' not "
Regards,
Phil
11-22-2013 06:45 AM
Hi,
If you enter a traffic filter of (user.src eq '') then it will list all traffic entries with a blank username. Note it is 2 x ' not "
Regards,
Phil
11-22-2013 08:54 AM
Thank You, this exactly what I was looking for.
06-14-2023 12:42 AM
Sorry to bring this up 10 years later, but that doesn't work anymore. This query returns no users: (user.src eq '')
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
