topic Re: event filter in secmon in Network Security https://community.cisco.com/t5/network-security/event-filter-in-secmon/m-p/492821#M100130 <HTML><HEAD></HEAD><BODY><P>Hmmm... I don't think event viewer supports negative filtering.</P></BODY></HTML> Thu, 30 Jun 2005 13:01:03 GMT a-vazquez 2005-06-30T13:01:03Z event filter in secmon https://community.cisco.com/t5/network-security/event-filter-in-secmon/m-p/492820#M100125 <P>I have a question for the group. </P><P></P><P>With SecMon 2.0.2, you can apply an event filter by using the filter editor for a specific signature id to be included in the console view. Is there a way to have the event console exclude multiply signatures of choice but display all the rest when opening the event console with &lt;last saved&gt; event filter. In other words, what I would like is to be able to &#147;open the console&#148; but exclude the sig_id for example nachi (2156)</P> Sun, 10 Mar 2019 09:30:30 GMT https://community.cisco.com/t5/network-security/event-filter-in-secmon/m-p/492820#M100125 darin.marais 2019-03-10T09:30:30Z Re: event filter in secmon https://community.cisco.com/t5/network-security/event-filter-in-secmon/m-p/492821#M100130 <HTML><HEAD></HEAD><BODY><P>Hmmm... I don't think event viewer supports negative filtering.</P></BODY></HTML> Thu, 30 Jun 2005 13:01:03 GMT https://community.cisco.com/t5/network-security/event-filter-in-secmon/m-p/492821#M100130 a-vazquez 2005-06-30T13:01:03Z