 Re: Optimizing a rulebase where some rules are set not to log
You can install new log module with eval 15 day license. In Global Properties check Reporting Tools -> Enable tracking all rules (including rules marked as None in the Track column) and Send all logs to: New_Log_Module.
Then install Eventia Reporter and try to integrate with log module. Eventia Reporter has report Standard -> Security -> Rule Base Analysis "The report can be used to determine which rules are used the most, which rules are used infrequently and which rules are never used." |