https://community.cisco.com/t5/network-security/ftd-syslog-question/m-p/4413575#M1081317 <P>Hi everyone,</P><P>&nbsp;</P><P>I'm managing my FTD via FMC.<BR />I'm sending my syslog to an external server.<BR />Now, I've noticed that sometimes I get two of the same log under different user, for example:</P><P>&nbsp;</P><P>Jun&nbsp; 3 10:54:59 172.20.1.95 :Jun 03 07:55:00 UTC: %FTD-config-6-111008: User '<STRONG>Config</STRONG>' executed the 'host 8.8.8.1' command</P><P>Jun&nbsp; 3 10:54:59 172.20.1.95 :Jun 03 07:55:00 UTC: %FTD-config-6-111008: User '<STRONG>enable_1</STRONG>' executed the 'host 8.8.8.1' command.</P><P>&nbsp;</P><P>Who can explain why ? Its causing me a lot of issues. please help.<BR />Thanks,</P> Sun, 06 Jun 2021 08:49:27 GMT meidanmeshulam 2021-06-06T08:49:27Z https://community.cisco.com/t5/network-security/ftd-syslog-question/m-p/4413575#M1081317 <P>Hi everyone,</P><P>&nbsp;</P><P>I'm managing my FTD via FMC.<BR />I'm sending my syslog to an external server.<BR />Now, I've noticed that sometimes I get two of the same log under different user, for example:</P><P>&nbsp;</P><P>Jun&nbsp; 3 10:54:59 172.20.1.95 :Jun 03 07:55:00 UTC: %FTD-config-6-111008: User '<STRONG>Config</STRONG>' executed the 'host 8.8.8.1' command</P><P>Jun&nbsp; 3 10:54:59 172.20.1.95 :Jun 03 07:55:00 UTC: %FTD-config-6-111008: User '<STRONG>enable_1</STRONG>' executed the 'host 8.8.8.1' command.</P><P>&nbsp;</P><P>Who can explain why ? Its causing me a lot of issues. please help.<BR />Thanks,</P> Sun, 06 Jun 2021 08:49:27 GMT https://community.cisco.com/t5/network-security/ftd-syslog-question/m-p/4413575#M1081317 meidanmeshulam 2021-06-06T08:49:27Z