Logging: Enhanced log searching tools (Better search & filter)
I would like to see better and more granular search options/filters for log searching.
What if I'm interesting in a host only when it's a source and only when it goes to port 25 on another host. Today I can only give a simple search term and get way to much data back for it to be useful fast without spending too much time looking through the result.
I would like to search or filter log files by using multiple keyword such as searching log in search log files / web filtering by combining the 2 strings of IP and url to narrow down the scope of searching and results.
I would add "saved searches", so you can have already predefined searches. As well as, chained searches. Protocol + IP / Mac address + port + Interface. Thanks.