Firewall search results wrong format

It's worked like that as long as I can remember.  I use grep at the command line for searching 99% of the time as it lets you get more granular.

Cheers - Bob

Bob,

Are we sure we are talking about the same thing?

It really makes no sense to have detailed search results returned for all logs but the firewall log. It's NEVER worked that way, for me, until v9.602.  Either a bug was introduced in v9.602 or something happened during the installation of the update.

I am positively sure that it used to return full line results without the salmon colored background.

In earlier versions, if you searched on today's Firewall log, you got the Live Log presentation.  If you searched on anything that included today, you got the regular log presentation, but that's not true today.  I just checked a client's box on 9.601 and my lab on 9.602 and confirmed that the behavior has indeed changed - not cool!

Good job finding and reporting that!  I'll get Sophos' attention

Cheers - Bob

Hi All,

Apologies for any inconveniences caused. I'm currently following up with my team regarding this. Will report back when I receive more information.

Regards,

Still not fixed. I'm now running 9.700-5. Is there a workaround until it's fixed? I need the ability to search current and archived logs.

Also, what is a good, simple, easy to use log analyzer free or paid?

Still not fixed in 9.701-6.

Still not fixed in 9.701-6.

Since it's apparent that the Dev's have no interest in fixing this, can someone please provide a sample grep that can search for a particular IP address?

For example, I want to have every line returned that contains the IP 1.1.1.1. Date range if from present to 21 days in the past.

Everything this month (April 2020) before the current day:

zgrep '1\.1\.1\.1' /var/log/packetfilter/2020/04/* |more

Cheers - Bob

Thanks, Bob!

I neglected to escape the "dots" in all of my previous trials.