Hi,
I am trying to filter a specific port in live log view. I filter on this string -
:53
This shows me what I am looking for (port 53) but in addition ports that contain this string eg: :5353 also matches. Also the time in seconds at :53 also matches.
How can I modify my string to only search port 53?
Many thanks,
P
Hi P,
You can use a full regex search: :53[^0-9]
The page will be improved eventually and the searching made easier. I think there's already a ticket for it.
Cheers,
Franco
Quote from: franco on February 01, 2020, 07:24:54 AM
Hi P,
You can use a full regex search: :53[^0-9]
The page will be improved eventually and the searching made easier. I think there's already a ticket for it.
Cheers,
Franco
Hello Franco,
Thank you, this information is excellent. I was able to get close enough to what I needed with a simple :53[^5353] so thank you for this tip. Even that alone filters out enough to make the log more manageable.
In addition I have managed to switch over completely from PFsense with all the help from the forums so while there is a learning curve in changing over, and some differences its certainly manageable for anyone if even I can do it.
Thanks again,
P
Hi P,
Just a small note: "[]" is an atom for a single character match, "^" means invert match and 3 and 5 are the selectors... so what you wrote is actually the same as [^53] which means a single character that is not 5 or 3. It could still show other ports like :53222 :53917 etc.
Cheers,
Franco