Hi All,

Want to check, if we can query/search/check how many number of
filter/drop event using searching or any other method at sentinel
console, the filter rules has been apply at connector and some at event
source. The purpose of this is to investigate which device send the most
filtered event because suddenly our operational eps surge but our
functional eps is low.

If the query is exist, kindly share.

Thank you in advance.

hareez_12's Profile: https://forums.netiq.com/member.php?userid=10292
View this thread: https://forums.netiq.com/showthread.php?t=56844