Core: [Feature Request] Improved log filtering capabilities

[lordraiden]

Is your feature request related to a problem? Please describe.
A more powerfull way to filter logs in order to do a proper firewall troubleshooting

Describe the solution you'd like
A box or a dropdown to select the firewall rule for which I want to filter the logs.
In particular it would be interesting to filter logs by fw rule ID

Describe alternatives you've considered
Something similar to this would be fine.
This filters can stack, so you can apply different conditions together to refine the logs

[lordraiden]

@AdSchellevis Help wanted label?

[fichtner]

Free for all to contribute.

[AdSchellevis]

I've just added https://github.com/opnsense/core/commit/2966211a8fa77330d80e3ea4c88698beb6d0c2d5, which should functionally do what you're looking for. Although the layout could certainly be improved, I'm not planning to work on that currently (it's quite time-consuming).

Example above filters on unique rule id and protocol

[fichtner]

Does this supersede https://github.com/opnsense/core/issues/2195 ?

[AdSchellevis]

@fichtner that looks quite similar, although I haven't included all fields (just add the options to the filter_tag select if needed)

[lordraiden]

Thanks I think at least with rule ID and protocol is more than enough for almost any firewall rule troubleshotting purpose.

Probably a stupid question but where in the WebUI can I see the rule id of a firewall rule?

[AdSchellevis]

it's not a stupid question, in the rule overview, click on
The info button for the log lines will also display the rule hash