topic pfsense logs in Getting Data In

pfsense logs

hamedha — Tue, 29 Sep 2020 21:43:43 GMT

I installed Splunk TA and app for pfsense
I have this event search that get directly with this app
I dont understand what is meaning ?
index=gw_pfsense sourcetype=pfsense_filterlog action=blocked | iplocation src | search lat>=42.18750 lat<45.00000 lon>=22.50000 lon<28.12500

I mean specially | search lat>=42.18750 lat<45.00000 lon>=22.50000 lon<28.12500

Re: pfsense logs

ruud_umbrio — Tue, 23 Oct 2018 14:12:21 GMT

Hi, lat means 'latitude' and lon means 'longitude'. Your search is an area that covers parts of Romania, Bulgaria and Servia.

Best regards,
Ruud

Re: pfsense logs

ruud_umbrio — Tue, 23 Oct 2018 14:12:53 GMT

Hi,
lat means 'latitude' and lon means 'longitude'. Your search is an area that covers parts of Romania, Bulgaria and Servia.

Best regards,
Ruud