20-2
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 20 Queries and Reports
Queries
To Run a Quick Query
Step 1
From the
Query
subtab, enter a source IP, destination IP, or a service into the query criteria fields.
Step 2
Click the
Submit Inline
button to run the query.
Figure 20-2
Running a Quick Query
To Run a Free-form Query
Step 1
Enter a source IP, destination IP, or a service into the quick query field.
Figure 20-3
Running a free-form query
Step 2
Click the name of the query (
[None]
appears as the name if you have none saved) or Edit to enter the
rest of the query. You can also click the parentheses icon (
)to add parentheses for nested queries or
click the trash can icon (
) to remove parentheses.
Step 3
Under Search String enter strings to query; under Operation, select the operation (
AND
,
OR
,
NOT
). For
the final item in the list, select
None
.
Step 4
Click the
Apply
button.
Step 5
Click the
Submit
button to run the query.
