I'm trying to run a search to include only events that include "Same LAN" but the search returns results that include the word "Same" OR "LAN". Is there a way to search only for results that include "Same" AND "LAN" with a space between them?
I'm trying to work around a broken malicious rogue reporting mechanism that we're working through a long term support case on. These logs are showing in the events but the rogue monitoring page doesnt seem to include Same LAN malicious rogues and lists these as a rogue with no policy rule matched.
