OPNsense Forum

English Forums => General Discussion => Topic started by: l0rdraiden on April 23, 2020, 09:52:28 PM

Title: View only logs events related to a rule
Post by: l0rdraiden on April 23, 2020, 09:52:28 PM
Is there  way to filter the logs to see only the ones related with a rule?
This is basic and avaibale in any other firewall, it is possible in opnsense?
Title: Re: View only logs events related to a rule
Post by: l0rdraiden on April 25, 2020, 12:45:24 PM
Really? no way? dont the firewall rules have an ID or something?
Title: Re: View only logs events related to a rule
Post by: l0rdraiden on April 25, 2020, 06:38:51 PM
Well considering that it is probably not even possible I have oppened this
https://github.com/opnsense/core/issues/4065
Title: Re: View only logs events related to a rule
Post by: franco on April 25, 2020, 08:11:00 PM
It would be nice if somebody would work on this. I have no spare resources for this in the foreseeable future.

https://github.com/opnsense/core/issues/2195


Cheers,
Franco
Title: Re: View only logs events related to a rule
Post by: hbc on April 25, 2020, 09:59:10 PM
@lordraiden: you should learn RegEx. Then you can build the filter rule yourself pretty quick.

E.g. exclude all logs from interface IPSec:  ^((?!IPsec).)*$