Creating a Custom Filter Tab for Local System Access Log

  1. Open QuLog Center.
  2. Go to Local Device > System Access Log.
  3. Go to the search bar.
  4. Click .

    The Advanced Search window appears.

  5. Specify the following filter fields:

    Fields

    Steps

    Severity Level

    1. Click .

      The severity level drop-down menu appears.

    2. Select a severity level option.

    Accessed Resources

    1. Click .

      The content condition option appears.

    2. Select a condition.

    3. Specify the keywords.

    Date

    1. Click .

      The date drop-down menu appears.

    2. Select a date option.

    Connection type

    1. Click .

      The connection type option appears.

    2. Select a connection type.

    User

    1. Click .

      The user condition option appears.

    2. Select a condition.

    3. Specify the keywords.

    Action

    1. Click .

      The action drop-down menu appears.

    2. Select an action option.

    Source IP

    1. Click .

      The source IP address condition option appears.

    2. Select a condition.

    3. Specify the source IP address.

  6. Optional: Click Reset to clear all search filters.

    Respecify search filters as many times as required.

  7. Click Search.

    The list of filtered results is displayed.

  8. Click Add as Customized Tab.

    The Add as Customized Tab window appears.

  9. Enter a tab name.
  10. Click Apply.
    • The custom filter tab is created.

    • The custom filter tab is displayed next to the Main tab.