cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Event Field is not Visible in "Event Queries"

Jump to solution

Hi,

I want to create a custom report. the report should show [lets say, in a table] the "URL" from log.

the field is parsed (default custom type), and available in dashboards searches  etc.

for some reason, when I pick from the "Query Wizard" >> "Event Queries"

the URL field is missing... cant see it. anyone now why?

 

in addition, How can I create a table aggregating according to more that 1 column?

for example, showing "source IP" in column 1, and the "Source geo country" in column 2 etc.

@pbpillai @lratcliffe 

1 Solution

Accepted Solutions
pbpillai
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 7 of 7

Re: Event Field is not Visible in "Event Queries"

Jump to solution

This report for getting details about the top most visited URL’s can be generated in a firewall.

Since this is report customisation you can check with the McAfee professional services team if we can generate this report on the SIEM.

View solution in original post

6 Replies

Re: Event Field is not Visible in "Event Queries"

Jump to solution

would love to have your assistance

@pbpillai  @mherr @lratcliffe 

pbpillai
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 7

Re: Event Field is not Visible in "Event Queries"

Jump to solution

I am able to see when I click on Add or Edit Report in ESM Properties>Reports page.

In the line number 6 (Optional Section), when I try to add a new filter by typing in 'UR' it gives options to select URL & URL Category.

Please check the attached screenshot.

Regards,

Prashanth B Pillai

McAfee Technical Support

Customer Success Group

Re: Event Field is not Visible in "Event Queries"

Jump to solution

Hi and thank you for your reply.

my issue is not a filter issue.

"URL" is not available under "Event Queries".

attached a screenshot showing the available fields starting with U

pbpillai
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 7

Re: Event Field is not Visible in "Event Queries"

Jump to solution

Yes in Query Wizard>Event Queries,URL is not listed.

You can create a URL_Category query, filter for the URL then export the view in text or PDF format.

Once you select the URL_Category in Event queries, you can also add a filter for the respective URL.

The respective view can be saved as a new name as well.

The above view result can be exported in PDF as well as text format.

Regards,

Prashanth B Pillai

McAfee Technical Support

Customer Success Group

Re: Event Field is not Visible in "Event Queries"

Jump to solution

Hi, thank you for your response.

my main goal is to present within a table the most visited URLs (as a "report" object) . Thus, filtering for a specific URL as suggested (in a view or in a report) is not quiet helpful since I need ALL last visited URLs.

*another issue - querying for "URL category" shows only 1 category - "Other".

can you please further assist?

 

 

pbpillai
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 7 of 7

Re: Event Field is not Visible in "Event Queries"

Jump to solution

This report for getting details about the top most visited URL’s can be generated in a firewall.

Since this is report customisation you can check with the McAfee professional services team if we can generate this report on the SIEM.

View solution in original post

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community