The Add Filter box shows log field name.Ĭontext-sensitive filters are available for each log field in the log details pane.
To see log field name of a filter/column, right-click the column of a log entry and select a context-sensitive filter. This context-sensitive filter is only available for certain columns. The search criterion with a icon returns entries matching the filter values, while the search criterion with a icon returns entries that do not match the filter values.ĭepending on the column in which your cursor is placed when you right-click, Log View uses the column value as the filter criteria. In a log message list, right-click an entry and select a filter criterion. To filter log summaries using the right-click menu: In the Time list, select a time period.You can combine freestyle search with other search methods, for example: Skype user=David. Then if you type “ Skype” in the Add Filter box, FortiAnalyzer searches for “Skype” within these indexed fields: app,dstip,proto,service,srcip,user and utmaction. Set value "app,dstip,proto,service,srcip,user,utmaction" Searches the string within the indexed fields configured using the CLI command: config ts-index-field.įor example, if the indexed fields have been configured using these CLI commands: In Advanced Search mode, enter the search criteria (log field names and values).Ĭlick at the right end of the Add Filter box to view search operators and syntax pane. Switching between regular search and advanced searchĪt the right end of the Add Filter box, click the Switch to Advanced Search icon or click the Switch to Regular Search icon. You can use search operators in regular search. Only displayed columns are available in the dropdown list. To filter log messages using filters in the toolbar:Ĭlick Add Filter and select a filter from the dropdown list, then type a value. To use case-sensitive filters, select Tools > Case Sensitive Search. You can filter log messages using filters in the toolbar or by using the right-click menu.įilters are not case-sensitive by default.
0 kommentar(er)
