A view was setup by a contractor to review Firewall events as part of a rulle review. The View had the source and destination IP's as wildcard (*). The filter options for example any dest IP NOT 10.0.0.0/8 never seemed to be applied, nor any other filter option as well. Would the wildcard in the View settings override and "disable" any use of the filter panel?
Removing the wildcards in the view query settings did not seem to change the behavior.
Thoughts, possibly wildcards not allowed despite help?