Is there a list of options / filters I can use in the Web GUI ?

[PatrickD]

Hi,

Is there a list, a document that would explain how I can use filters in the Web GUI ? I know how to apply simple filters by clicking on a field -> filter, but I would like to use more advanced features.

As exemples :

- (tag/member eq 'TEST') will list all security policies that have "TEST" in their TAG list. How can I negate that so that only rules that don't have the TAG "TEST" would be listed ?

- How can I filters my policies so I only list disabled or enabled rules ?

- ( receive_time leq '2013/05/30 07:43:00' ) will return all log events that have occured before 7:43. What if I want everything that have occured AFTER 07:43 ?

Thank you!

[panos]

ı don't know if there is a guide.

You can use ! to negate all of the thing in brackets

Ex:   !( addr.src in 10.1.1.10 )

Ex  ( receive_time geq '2013/05/30 07:43:00' )

[VinceM]

Hi,

Best thing if don't know the syntax can be to use the "filter add" option - small + on the top righ corner in Monitor/traffic.

V.

[PatrickD]

Thanks for the hint! This will help me build my queries. I was working in my policies where the option to add a filter is simply not there.

[PatrickD]

Thanks. I did tried the use of !, and I though it was not working. It actually work, but not exactly as I would like. I'll keep searching, but I should be able to figure it out now.