The filtering provided by the ORF Log Viewer helps to distill the log information you are looking for by various criteria. The Log Viewer allows defining, saving and loading complex filters that are applied on the loaded logs. When a filter is applied to the loaded logs, only those events are displayed that satisfy the filter criteria.
When applying a filter, the Event Log View automatically switches to Filtered View from the Non-filtered View. In the Filtered View, you see only those events that satisfy the filter criteria. To display all events again, select or press SHIFT-CTRL-A.
Select or press SHIFT-CTRL-F to display the Filter dialog.
Filters consist of filter rules that specify the filtered event column and the expected value or value pattern. The log event has to satisfy all of the filter rules to be displayed in the filtered view (logical 'AND' relation). A single rule may contain multiple possible values and if either of the values match, the entire rule will match (logical 'OR' relation).
Example: adding a rule which matches the Blacklist event class, a rule which matches recipient address [email protected] and another rule which matches recipient address [email protected] will result in a view with events that have Blacklist class AND the recipient address is either [email protected] OR [email protected].
Start building a new filter using the Add Rule button on the Current Filter tab.
Save the filter defined on the Filter Properties tab on the Filters tab. Specifying a name for the filter and click Save.
To load a previously saved filter, select the filter from the list and click the Load button.
Filters are saved to the ORF Log Viewer configuration, so you do not lose them when you quit from the Log Viewer.
You can apply the saved filters quickly by picking them up from the Quick Filters toolbar. You can also define new filter rules by selecting <New..> option in the quick filter dropdown list, or edit the currently applied filter by selecting <Edit..>.
By right-clicking on an entry in the event list and selecting the Show only emails from sender... or Show only emails from IP... or Show only emails for recipient... you can switch to a filtered view instantly.
At the On Arrival filtering point, an email may have multiple recipients. When filtering for the recipient list, consider that the rule will match if either of the recipient email addresses satisfy the rule. Due to this, there is no way to filter for a specific recipient list, only for a given recipient.