This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall Log Search Doesn't Work

Not sure what I'm doing wrong. I see "Country blocked" entries in the Live Log for today but when I search for them, I get no results. I've tried all iterations of the search term with and without quotes:

This thread was automatically locked due to age.

Top Replies

FormerMember over 3 years ago +1 verified

Hi busthead , Thanks for reaching out to the Community! Could you please change the search term to "GEOIP" and let me know if that works for you? Thanks,

Parents

+1 FormerMember over 3 years ago

Hi busthead,

Thanks for reaching out to the Community!

Could you please change the search term to "GEOIP" and let me know if that works for you?

Thanks,
Cancel
Vote Up +1 Vote Down

Cancel
0 busthead over 3 years ago in reply to FormerMember

Yes, that works.

That said, poor design for the Live Log to differ from Archived Logs. Just causes confusion.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 busthead over 3 years ago in reply to FormerMember

Yes, that works.

That said, poor design for the Live Log to differ from Archived Logs. Just causes confusion.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 FormerMember over 3 years ago in reply to busthead

Hi busthead,

The country blocking is the simplified term used in log viewer, in the backend it’s called GEOIP.

Looking into packet filter logs from the backend gave me the hint to use search term as "GEOIP". :)

Reference log entry:

2021:04:13-00:55:31 h_patel-1 ulogd[7453]: id="2021" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped (GEOIP)" action="drop" fwrule="60019" initf="eth0" outitf="eth1" srcmac="00:1a:8c:a9:77:3b" dstmac="00:1a:8c:f0:ef:00" srcip="192.xxx.xx.x" dstip="124.xxx.xx.x." proto="17" length="76" tos="0x10" prec="0x00" ttl="63" srcport="39473" dstport="123"

I'm glad that it worked for you.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel