Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 834 / 1026

Table 106: Log Investigator Filters (continued)
Description Sample Filters Filter Type
Identifies device names, device versions, and
device types. Device
Device Domain Ver
Device family
Device Filters
Identifies transmissions if they are seen as
packets. Has Packet Data Transmission Type Filter
Identifies packets based on the port on a
device from which they were transmitted or
on the port on a device to which they were
transmitted. Src Port
Dst Port
NAT Src Port
NAT Dst Port
Port Filters
Identifies packets based on whether they
meet the conditions of a policy or a rule. Policy
Rule #
Policy ID
Policy Filters
Identifies the severity level of a generated
alarm. User Flag
Severity
Alarm Filters
Various Details
Protocol
Category
Alert
Roles
User
Application name
Miscellaneous Filters
NOTE: For a complete list of log entry columns available for filtering, see
“Log Viewer Columns” on page 760.
After you have set a filter, the Filter Summary displays a list of all filters applied to the
log entry data and the Log Investigator matrix displays values for matching log entries.
Example: Setting Filters in the Log Investigator
In this example, the Left Axis is set to Top Sources and the Top Axis is set to Top
Destinations (these are the default settings). To set a filter that displays all attack
category log entries generated by the Top Sources and received by the Top Destinations:
Copyright © 2010, Juniper Networks, Inc. 784
Network and Security Manager Administration Guide