Meraki Security Center - Documentation on Searches

JMora
New here

Meraki Security Center - Documentation on Searches

Hi guys, 

 

I'm looking for any documentation that exists on how to search and filter for events in the Cisco Meraki Security Center. 

 

So for example, there are different fields that we can select but what do those fields mean and what will be returned? For example, if I search for an IP address under "client", what does that mean versus if I search for that IP address under "URI" or "Remote IP"?

 

Thank you. 

2 Replies 2
RWelch
Kind of a big deal
Kind of a big deal

Security Center 

 

URI field would filter events based on the Uniform Resource Identifier (URI), essentially the address of a resource or service being accessed (e.g., a website or a specific web service).

Remote IP would be the external IP address in a connection or security eventof the device outside of your network communicating or attempting to communicate with a device inside your network. 

If you found this post helpful, please give it Kudos. If my answer solves your problem please click Accept as Solution so others can benefit from it.
JMora
New here

Thank you, but it doesn't quite have what I'm looking for. I'm looking for the difference in these searches and what they mean. What does searching by Client, URI, Remote_IP, etc mean? 

 

Let's say I'm searching for Source IP 10.0.0.1 and Destination IP 10.0.0.2 in Security Center. How can I do that search with those fields?

Hope that helps. 

Get notified when there are additional replies to this discussion.