ID: select-action
This filter specification can be used to select only the firewall events that were permitted or denied.
Parameters
This parameter contains the action that should selected:
Select only denied events.
Select only permitted events.
This is also a possible action when we can't determine from the log information if this event was denied or permitted.
Defaults to denied.