Logs; Possible Operations - Stormshield SN series Configuration Manual

Logs

Possible operations

Toolbar no. 1: period and display mode
Time scale
Refresh
Line view /Grid view
Expand all the
elements / Collapse
elements
Toolbar no. 2: simple or advanced searches
Change search modes using the "Simple search" / "Advanced search" button.
The "reinit. Columns" button allows restoring the default display settings. This refers to whether
columns are hidden or shown or the modification of their width.
Simple search mode
In this default search mode, the appliance will search for the value entered in all the fields of the
log files displayed.
This search only covers field values, and not field names. For example, to filter blocked
connections, enter the value "block" in the search field, instead of "action=block".
(field for entering the
search value)
Advanced search mode
In advanced mode, several search criteria can be combined. All of these criteria have to be met in
order to be displayed, as the search criteria are cumulative.
This combination of search criteria can then be saved as a "filter". Filters will then be saved in
memory and can be reinitialized in the Preferences module of the administration interface.
(Filter drop-down
menu)
Page 25/448
This field allows choosing the period: Last hour, Today,
past 7 days, past 30 days and customized duration.
The past hour is calculated up to the minute before the current one.
l
The Today view covers the current day, from midnight of the day before up to
l
the minute before data is refreshed.
The last 7 and 30 days refer to the period that has ended the day before at
l
midnight.
The customized duration allows you to define a determined period, which
l
covers the whole day except for the current day in which data runs up to the
previous minute.
The button is a shortcut allowing you to select a customized duration.
This button allows you to refresh the display of data.
Displays logs in lines or arranged in a table. The line view highlights the values of
fields that match search criteria.
Displays all fields or only main fields.
To create the search, enter text in the field or drag and drop from a result field.
Select a filter to launch the corresponding search. The list will suggest filters that have
been saved previously and for certain Views, predefined filters. Selecting the entry
(New filter) allows reinitializing the filter by selecting the criteria selection.
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
AUDIT LOGS