StoneBlog.stonesoft.com

Log browsing and filtering is one of the most frequent administrators’ tasks. That’s why we continuosly try to improve the workflows related to logs. In SMC 5.2 there are a few nice shortcuts that you can utilize when filtering the logs:

• Filter logs by using sub-networks in normal IP filter fields. Just right-click the Query panel in Log Browser, create a new Src, Dst or Any IP Address Filter and type “192.168.1.0/24″ for example. The system filters the logs based on your network address and netmask.
• Filter logs by searching substrings across the relevant log fields. This new feature utilizes intelligently the Element Search, IP search and text search depending on your search input and ultimately displays the logs that match your keywords. The “Search Filter” can be found by right-clicking the Query panel in Log Browser.
• Handling of time ranges has been improved in SMC 5.2. Now if you select e.g. “1 Hour” time period from the Query panel, the system never goes beyond that time range. “Automatic” time range option queries the data in discrete steps (15 min, 30 min, 1 h, 2 h, 3 h, etc.) as long as at least one screenful of logs can be found. Due to this change, there is no need for manual locking of time line. That’s why the small lock icon on the left side of the time line has been removed in SMC 5.2.

written by Tero Jantunen - 894 views \\ tags: 5.2, Feature Previews, ip address, Log browsing, Log filtering, logs, network address, search, SMC