Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 26 subscribers
  • Views 429 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

log live view: search for IP beginning with e.g. 10. including the dot . not 100.

LHerzog

Hi,

is it somehow possible to get the live viewer filter correctly including the first dot? This is still not working.

Any workaround?

Already asked this unanswered in 2020: https://community.sophos.com/sophos-xg-firewall/f/discussions/123796/live-log-viewer-filter-issue-with-ignoring-the-terminating-dot 

In the screenshot I want to find IP address like 19.200.100.1 and so filter for "IP beginning with 19." or "IP beginning with 19.\"

Instead it is finding all 192.168.xxx.xxx internal IPs.

This limitation is a huge lack in usability.



This thread was automatically locked due to age.
Parents
  • +1

    Hello LHerzog,

    Thank you for contacting the Sophos Community.

    I actually did ask about this and got feedback, basically.

    "Dot is wildcard character for SQLite FTS5 search query due to which it acts as a any single place character rather than dot itself. This is the behaviour currently"

    This is being tracked under NC-67367 but it has no ETA or Fix version yet, and right now is on the backlog of Product Management for further features enhancements of GUI.

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Reply
  • +1

    Hello LHerzog,

    Thank you for contacting the Sophos Community.

    I actually did ask about this and got feedback, basically.

    "Dot is wildcard character for SQLite FTS5 search query due to which it acts as a any single place character rather than dot itself. This is the behaviour currently"

    This is being tracked under NC-67367 but it has no ETA or Fix version yet, and right now is on the backlog of Product Management for further features enhancements of GUI.

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Children
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?