Advanced web security reporting 6.1 filter by time

[trojansolutions]

Hello,

There is some way to create a custom filter and filter by date.

I need to add a filter with the logs of the last month and between a few hours in particular.

In Splunk, the filter it would be something like this:

  | evaluate hour = tonumber (strftime (_time, "% H"))
  | eval dow = tonumber (strftime (_time, "% w"))
  | where hour> = 6 AND hour <= 18 AND dow! = 0 AND dow! = 6

But I can't find a way to do it in Advanced web security reporting.

Thank you.

[ismsingh]

Hi, You will get that option in the Custom Filters itself to define the Date & Time Range. Please find the screenshot attached. Regards Ismeet