Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
lazie
New Contributor

5.0.7 Can not find " Source IP" in log filter!

I want to filter the report for only IPs in 192.168.1.0/24 subnet but I can not find the filter " Source IP" to add in Advance Setting tab. Could someone help me? I remember this filter was available in previous version :(
6 REPLIES 6
AtiT
Valued Contributor

Hi, Choose the Source/Device column in the Column Settings:

AtiT

AtiT
jorge9090
New Contributor

Hello lazie, are you working with Fortigate or Fortianalyzer? As AtiT mentioned, the Field is called " Source/Device" in Fortianalyzer and " Source" in Fortigate.
lazie
New Contributor

Thank you very much, AtiT and jorge9090. However. it seems the problem has not been solved yet. In my FortiAnalyzer, I want to run a report for only the subnet 192.168.1.0/24 and I have tried adding this filter but the result report is empty. It worked well on previous OS. May be you know what the problem is.
AtiT
Valued Contributor

Hi, set the filter directly to 192.168.1.0/24

AtiT

AtiT
jorge9090
New Contributor

Try filtering the logs first, go to Log View > Traffic Log and search for " srcip=192.168.1.*" . If it filters the logs correctly, the problem may be at the dataset of the report.
lazie
New Contributor

Dear all, It is solved when I set the filter directly to 192.168.1.0/24. Thank you so much for your support. Have a good day.
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors