beta_microsoft_windows_firewall = { # The name of the log format log.format.format_label = "Microsoft Windows Firewall Log Format (BETA)" log.miscellaneous.log_data_type = "firewall" log.miscellaneous.log_format_type = "firewall" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^#Software: Microsoft Windows Firewall" # Log Filters log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'packets = 1;' } # mark_entry } # log.filters log.field_options = { sessions_visitor_id_field = "src_ip" sessions_event_field = "packets" } # log.field_options database.numerical_fields = { packets = { default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # packets size = { default = true requires_log_field = true type = "float" display_format_type = "bandwidth" } # size unique_source_ips = { log_field = "src_ip" type = "unique" } # unique_source_ips } # database.numerical_fields create_profile_wizard_options = { # How the reports should be grouped in the report menu report_groups = { date_time_group = "" } # report_groups } # create_profile_wizard_options } # beta_microsoft_windows_firewall