# Is there a way to query/filter for just RFC Non-Compliant Traffic?

**URL:** <https://discuss.elastic.co/t/is-there-a-way-to-query-filter-for-just-rfc-non-compliant-traffic/275155>\
**Category:** Kibana\
**Created:** [June 7, 2021, 1:25pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-query-filter-for-just-rfc-non-compliant-traffic/275155 "2021-06-07T13:25:07Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![kanrab](https://avatars.discourse-cdn.com/v4/letter/k/7feea3/32.png) [@kanrab](https://discuss.elastic.co/u/kanrab)\
**Post date:** [June 7, 2021, 1:25pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-query-filter-for-just-rfc-non-compliant-traffic/275155/1 "2021-06-07T13:25:07Z")

</div>

I was unable to come up with a come up with anything. Any ideas?

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [June 8, 2021, 9:25pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-query-filter-for-just-rfc-non-compliant-traffic/275155/2 "2021-06-08T21:25:03Z")

</div>

Do you have firewall logs ingested in Elasticsearch? Do the logs have data regarding RFC Non-Compliance?

---

<div class="post-metadata">

**Author:** ![kanrab](https://avatars.discourse-cdn.com/v4/letter/k/7feea3/32.png) [@kanrab](https://discuss.elastic.co/u/kanrab)\
**Post date:** [June 15, 2021, 7:25pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-query-filter-for-just-rfc-non-compliant-traffic/275155/4 "2021-06-15T19:25:21Z")

</div>

I am using Amazon's Elastiservice and only have access to Kibana. The logs state "Non-RFC Compliance", but I wasnt to view just those.

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [June 15, 2021, 8:14pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-query-filter-for-just-rfc-non-compliant-traffic/275155/5 "2021-06-15T20:14:41Z")

</div>

Well, if you search for that data in Discover, there it will be 🙂

> **[Discover | Kibana Guide \[7.13\] | Elastic](https://www.elastic.co/guide/en/kibana/current/discover.html#search-in-discover)**

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 13, 2021, 8:14pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-query-filter-for-just-rfc-non-compliant-traffic/275155/6 "2021-07-13T20:14:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.