Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[JSA Series] Performing a search on the Log Activity tab using "AND/OR" operators

0

0

Article ID: KB33387 KB Last Updated: 27 Aug 2019Version: 2.0
Summary:

This article explains how to perform an advanced search by using AND/OR operators on the Log Activity tab.

 

Solution:

Use the Advanced Search feature to build an Ariel Query Language (AQL) search query to retrieve specific information about events and flows.

For example, to search for values that would fall in the same column, such as an event name, administrators should create a search that leverages the OR value.

Tip: If you are searching for values with a space in them, such as an event description or a custom property, include single quotation marks around your value.

For example:

select * from events where QIDDESCRIPTION(qid) = 'Create or update server administrator ' OR 'VM administrator login';
 

Tip: When searching data that falls in the same column of the user interface or appears only once in the event payload, use OR operators in the search.  In the following example, we are trying to find out how many events contain the QID of 94000001 OR 38750003.

Incorrect

SELECT * from events where QID = 38750003 AND QID = 94000001;

 

Correct

SELECT * from events where QID = 38750003 OR QID = 94000001;

Modification History:
2019-08-27: content reviewed for accuracy.  minor format changes.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search