cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who Me Too'd this topic

Searching for rule with empty "description" field in the ruleset

L1 Bithead

Dear community

 

I am looking for a way to filter all rules without any value in the description field. We use this filed to reference the incident number which has been raised to request a security rule. And by policy we are not allowed to have any rules in our set where there is not reference in the description field. 

 

So i have tried to use the filter options and especially the "does not contain" option. But somehow i have failed to get the correct syntax. For example i have tried 

 

( description does not contain 'test' )

 

But this does not return any results. So i am even uncertain if the operator has to be spelled "does not contain" oder "doesnotcontain". I have tried both but none seems to work.

 

Cheers, Tibor

 

Who Me Too'd this topic