View only logs events related to a rule

« previous next »

Print

Pages: [1]

Author Topic: View only logs events related to a rule (Read 1851 times)

l0rdraiden

Jr. Member
Posts: 59
Karma: 4

View only logs events related to a rule

« on: April 23, 2020, 09:52:28 pm »

Is there way to filter the logs to see only the ones related with a rule?
This is basic and avaibale in any other firewall, it is possible in opnsense?

Logged

l0rdraiden

Jr. Member
Posts: 59
Karma: 4

Re: View only logs events related to a rule

« Reply #1 on: April 25, 2020, 12:45:24 pm »

Really? no way? dont the firewall rules have an ID or something?

Logged

l0rdraiden

Jr. Member
Posts: 59
Karma: 4

Re: View only logs events related to a rule

« Reply #2 on: April 25, 2020, 06:38:51 pm »

Well considering that it is probably not even possible I have oppened this
https://github.com/opnsense/core/issues/4065

Logged

franco

Administrator
Hero Member
Posts: 17661
Karma: 1611

Re: View only logs events related to a rule

« Reply #3 on: April 25, 2020, 08:11:00 pm »

It would be nice if somebody would work on this. I have no spare resources for this in the foreseeable future.

https://github.com/opnsense/core/issues/2195

Cheers,
Franco

Logged

hbc

Hero Member
Posts: 501
Karma: 47

Re: View only logs events related to a rule

« Reply #4 on: April 25, 2020, 09:59:10 pm »

@lordraiden: you should learn RegEx. Then you can build the filter rule yourself pretty quick.

E.g. exclude all logs from interface IPSec: ^((?!IPsec).)*$

Logged

Intel(R) Xeon(R) Silver 4116 CPU @ 2.10GHz (24 cores)
256 GB RAM, 300GB RAID1, 3x4 10G Chelsio T540-CO-SR

Print

Pages: [1]

« previous next »