Hi Gundeline,
Can you please elaborate what exactly do you want to achieve? If the IP configuration are fixed for all flow sensors, working with the flowsensors.osr will be the best way. It will change all existing sensors and will apply the filter rules to existing as well as to newly created sensors. You can use IP addresses and filter for protocols and ports, the same as you do within the custom sensors. Please have a look at this article for the correct syntax.
Please note that if the filter rules are processed from the top to the bottom, so if one packet is matching the first filter rule, it will not be counted into the channels below. This is scenario 1.
Next you can use the multi-edit feature to bulk edit all of your sensors.
Important: Please note that if you bulk edit multiple channel definitions using this feature, you will overwrite existing channel definitions on those sensors.
The last possibility will be to configure two flow receiver sensors on the same probe, which both have different filter rules. This will just be required if the channels of the flow sensors are different and not equal for each sensor.
Best regards, Felix
Add comment