Content Filtering, Filtering

[itnotifyalmaco]

Hello!  I'm curious if there's a way I can get even more specific about viewing the content filtering logs?  For example right now I go to Event Viewer and choose the filter of "Content Filter Blocked URL".  But what I would like is to view only certain categories, such as I want to see only the Spam and Malicious URL category and not care about the others.  Is there a way to do that?  Am I not good at search filtering?  Thanks!

[Tadpole86]

The event log cannot be filtered as you desire

The event log can be sent to a Syslog server and filtered there if it's worth the effort. 

[itnotifyalmaco]

Thank you for the input!  That might be worth it with some of the traffic info we like to see.  Thank you!

[CptnCrnch]

You could offload Syslog to another box (or even SIEM) and have all filtering possibilities over there. 🙂