Hello, as the title say, an option to only query for blocked or forwarded would be neat, as often I only need to see the blocked from a given IP, but I need to go thru all the forwarded as well, and there is many as you know :slight_smile:

forwarded: sed -n '/forwarded/p' /var/log/pihole.log blocked: sed -n '/0.0.0.0/p;/ ::$/p' /var/log/pihole.log

You can query the database located at /etc/pihole/pihole-FTL.db

[image] schworak: grep -ohE 'block[^.]+[^ ]+' /var/log/pihole.log | sort | uniq -c | sort -n When a domain is blocked, the word "block" is not used in the log. This query will only return entries with the word block in them, which does not correlate to blocked domains: grep -ohE 'block[^\.]…

OH MAN! So is there noting in the log that relates to them being blocked or do we have to go to the DB file for that? At least it works for forward.

[image] schworak: So is there noting in the log that relates to them being blocked With the default NULL blocking mode, all blocked entries return the IP 0.0.0.0. On the same line, Pi-Hole will indicate which list drove the blocking (i.e. gravity, blacklist, regex). grep 0.0.0.0 /var/log/pi…

AWESOME! The idea of using grep was right, just the filter for blocked items was wrong. Thanks a ton! The idea was working so well for forwarded and others. I am really enjoying Pi-Hole! Just manually finding those accidentally blocked items was bugging me. Happy now!

Filter on "Status" for Web Interface is in development. [image] Explicit Search in Pi-hole Admin Console Implemented When using the Query Log Search field, I can't seem to search explicitly, even with quotation marks. For example I want to filter/search for IP…

Advanced filtering has been implemented in v5.1 https://pi-hole.net/2020/07/15/pi-hole-5-1-released/

Query Log -> Able to query blocked or forwarded only

Feature Requests Implemented

yubiuser June 1, 2020, 8:33pm 10

Filter on "Status" for Web Interface is in development.