Results 1 to 10 of 10
  1. #1
    Untanglit
    Join Date
    Feb 2020
    Posts
    16

    Default Search all reports

    Is there a way to search all reports for a certain hostname or IP? My workflow is often something like "Domain XYZ isn't working, fix it!", then I go through all the places that could possibly block it. It'd be great if I could just search all of them.

  2. #2
    Untangle Ninja Jim.Alles's Avatar
    Join Date
    Jul 2008
    Location
    Central PA
    Posts
    2,606

    Default

    Network / All Sessions, add all the blocked columns, and save it as a custom report.

    Not a bad idea, if I do say so myself, thanks!


    Then use the filter box to narrow down to your IP.

    You might want to increase the # of Events first.
    Last edited by Jim.Alles; 06-15-2020 at 04:33 PM.

  3. #3
    Untanglit
    Join Date
    Feb 2020
    Posts
    16

    Default

    Oh ya, thanks! How can I do a "OR" query on the SQL conditions? That way I could just show any where blocked == true.

  4. #4
    Untangle Ninja Jim.Alles's Avatar
    Join Date
    Jul 2008
    Location
    Central PA
    Posts
    2,606

    Default

    Well, apparently not becasue Web Filter Blocked is not an available column.

    ?

    They are in a different data table (http_events).
    Last edited by Jim.Alles; 06-15-2020 at 04:50 PM.

  5. #5
    Untangle Ninja Jim.Alles's Avatar
    Join Date
    Jul 2008
    Location
    Central PA
    Posts
    2,606

    Default

    Quote Originally Posted by ckoehler View Post
    Oh ya, thanks! How can I do a "OR" query on the SQL conditions? That way I could just show any where blocked == true.
    And I don't know of a way to do the OR, unless there is some sort of SQL injection trick?
    If you think I got Grumpy

  6. #6
    Untangle Ninja Jim.Alles's Avatar
    Join Date
    Jul 2008
    Location
    Central PA
    Posts
    2,606

  7. #7
    Untangle Ninja Jim.Alles's Avatar
    Join Date
    Jul 2008
    Location
    Central PA
    Posts
    2,606

    Lightbulb

    He was doing NOT logic, so it got inverted.

    Code:
    null OR firewall_blocked IS true OR application_control_blocked IS true OR threat_prevention_blocked IS true
    blocked.png

    I am not using Application Control Lite, or Captive Portal; adjust as needed. I also added the Tags Column to mine.

  8. #8
    Untanglit
    Join Date
    Feb 2020
    Posts
    16

    Default

    Thank you sir, that makes sense!

  9. #9
    Untanglit
    Join Date
    Feb 2020
    Posts
    16

    Default

    Bonus points for only outgoing? Ideally I'd do something like "Server != 10.10.10.0/24" or whatever, but that doesn't seem to work.

  10. #10
    Untangle Ninja Jim.Alles's Avatar
    Join Date
    Jul 2008
    Location
    Central PA
    Posts
    2,606

    Default

    oh, I would look into conditions at the top of the report, rather than config.

    real quick, you can put 10.10.10 in the filter

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2