topic Re: Include a space in search on SZ Event logs in SmartZone and Virtual SmartZone

Include a space in search on SZ Event logs

Greg_WiGuy — Wed, 20 Jul 2022 18:18:37 GMT

I'm trying to run a search to include only events that include "Same LAN" but the search returns results that include the word "Same" OR "LAN". Is there a way to search only for results that include "Same" AND "LAN" with a space between them?

I'm trying to work around a broken malicious rogue reporting mechanism that we're working through a long term support case on. These logs are showing in the events but the rogue monitoring page doesnt seem to include Same LAN malicious rogues and lists these as a rogue with no policy rule matched.

Re: Include a space in search on SZ Event logs

vijaykuniyal — Thu, 21 Jul 2022 20:08:42 GMT

HI @Greg_WiGuy,

You can use the search filter in the below format, like I have done in the example screenshot, it will give you result for AND operation.

Search filter used = "Abnormal" "Termination"

In your example search filter will contain "Same" "LAN".

This filter will give you data results with space or any different word between them, as in below example.

Search filter used= "Abnormal" "Administrative"

Re: Include a space in search on SZ Event logs

Greg_WiGuy — Thu, 21 Jul 2022 20:12:11 GMT

Thank you for the response @vijaykuniyal but it does not allow me to get the results where I want to only return "Same LAN" with the space between these two words. I'm guessing there is some replacement "code" I need to use to include the space in the query for whatever the underlying filter software is.

For example, in all the ways I've tried, results include "Same" or "LAN" which does not help. I'm looking to return only results in which these two words are together.

Re: Include a space in search on SZ Event logs

vijaykuniyal — Thu, 21 Jul 2022 20:16:39 GMT

Hi @Greg_WiGuy,

May I know the firmware version of your SZ/vSZ, and any screenshot of the query for reference.

Re: Include a space in search on SZ Event logs

Greg_WiGuy — Mon, 25 Jul 2022 12:51:25 GMT

Hi Vijay,
I'm running SZ v6.1.0.0.935. Please DM me and I'll get some screenshots over to you as theres a lot of private addresses and info in them.

Re: Include a space in search on SZ Event logs

Parik_MN — Wed, 20 Dec 2023 16:45:43 GMT

Hello @Greg_WiGuy,

If you are still looking for a solution, feel free to contact Ruckus Support and open a case.

Regards,

Parik