Intrusion Rule Filters Notes
The filter you construct is shown in the Filter text box. You
can click keywords and keyword arguments in the filter panel to construct a
filter. When you choose multiple keywords, the system combines them using AND
logic to create a compound search filter. For example, if you choose
preprocessor under
Category and then choose
and enter
116
, you get a filter of
Category: “preprocessor” GID:”116”
, which retrieves all
rules that are preprocessor rules
and have a GID of 116.
The Category, Microsoft Vulnerabilities, Microsoft Worms,
Platform Specific, Preprocessor, and Priority filter groups allow you to submit
more than one argument for a keyword, separated by commas. For example, you can
choose
os-linux and
os-windows from
Category to produce the filter
Category:"os-windows,os-linux"
, which retrieves any
rules in the
os-linux
category or in the
os-windows
category.
To show the filter panel, click the Show icon.
To hide the filter panel, click the Hide icon.