log live view: search for IP beginning with e.g. 10. including the dot . not 100.

Question

Hi, 
 is it somehow possible to get the live viewer filter correctly including the first dot? This is still not working. 
 Any workaround? 
 Already asked this unanswered in 2020: https://community.sophos.com/sophos-xg-firewall/f/discussions/123796/live-log-viewer-filter-issue-with-ignoring-the-terminating-dot emmosophos 
 
 In the screenshot I want to find IP address like 19.200.100.1 and so filter for "IP beginning with 19." or "IP beginning with 19.\" 
 Instead it is finding all 192.168.xxx.xxx internal IPs. 
 
 This limitation is a huge lack in usability.

emmosophos · Accepted Answer

Hello LHerzog, 
 Thank you for contacting the Sophos Community. 
 I actually did ask about this and got feedback, basically. 
 "Dot is wildcard character for SQLite FTS5 search query due to which it acts as a any single place character rather than dot itself. This is the behaviour currently" 
 This is being tracked under NC-67367 but it has no ETA or Fix version yet, and right now is on the backlog of Product Management for further features enhancements of GUI. 
 Regards,

log live view: search for IP beginning with e.g. 10. including the dot . not 100.

Top Replies

Submitted a Tech Support Case lately from the Support Portal?