The Filter and Forward page allows you to transfer the
incoming logs to other audit record repositories as per the defined
conditions. You can use this page to create different filter conditions
using several filtering parameters. The page also contains provision
to view, add, update, or delete different forwarding conditions
based on several audit log message properties.
-
In the left pane, select Filter
and Forward.
-
In the Filter and Forward page,
perform the following actions.
-
To build a filter and forward condition, refer to Add a filter and forward
conditionAdd a filter and forward condition.
-
To edit a filter and forward condition, select the check
box corresponding to the condition and click Edit.
In the Edit Filter box, make the necessary
changes and click SAVE.
-
To delete filter and forward condition, select the check
box corresponding to the condition and click Delete and
click OK in the confirmation box.
Note: You can turn the Always save locally toggle
switch on to override any filter's local save options and save the
audit records in the local database before forwarding.