Filtering the Attack Log

[jvdavis456]

All,

I was wondering if there was a way to do more advanced filtering in the search field in each column of the Attack Log. For example, I can filter for an IP address, but I'd like to be able to filter out an IP address. The regex operators that we used to be able to use in the RTTA/HTA do not seem to be applicable in the new Attack Log.

[petermason]

Hi Jvdavis456,

No, there doesn't appear to be any way to do this appart from using the feature to Acknowledge All Matching Alerts for the IP address you don't want to see and only viewing Unacknowledged Alerts.

Regards

Peter Mason

[mjesmer · Accepted solution]

I believe this has been brought up before and has been submitted as a PER on the ideas site. If you want this, I would recommend going to the ideas site and registering then upvoting the idea.

Regards,

Matthew Jesmer

[jvdavis456]

Thanks folks, it's at least comforting to know it isn't just me.

For anyone finding this thread doesn't already have the link to the Ideas site here it is...

McAfee Ideas Forum: Latest