cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
230
Views
2
Helpful
1
Replies

How to tell which Umbrella Policy traffic is hitting in logs?

guacamoley
Level 1
Level 1

 Within the activity search, I see the Policy or Ruleset Identity column, but that is just showing the user that made the request. What I can't seem to find is which policy that user's request hit? 

1 Accepted Solution

Accepted Solutions

At the bottom of the grid, there's a slider... its on the FAR right, you're looking for "Ruleset or Rule"
Also make sure that column is enabled.



View solution in original post

1 Reply 1

At the bottom of the grid, there's a slider... its on the FAR right, you're looking for "Ruleset or Rule"
Also make sure that column is enabled.