https://community.cisco.com/t5/network-security/fmc-7-2-4-logging-bug-connection-event-to-fmc-but-it-is-not/m-p/5232035#M1117963 <P>Hi there,</P><P>I'm seeing similar behaviour, did you get a resolution to this?&nbsp;</P><P>Many thanks,</P><P>Tim</P> Tue, 03 Dec 2024 17:13:49 GMT TODavies 2024-12-03T17:13:49Z https://community.cisco.com/t5/network-security/fmc-7-2-4-logging-bug-connection-event-to-fmc-but-it-is-not/m-p/4938072#M1104948 <P>Connection events are forwarded to the FMC even if logging is configured to send them only to the syslog. (See the attached image). Is this a bug in FMC 7.2.4?&nbsp; This is a big problem because it fills the database and reduces the Event Capacity to a few days.</P><P>Any suggestions?</P><P>Thank you</P> Wed, 11 Oct 2023 12:50:28 GMT https://community.cisco.com/t5/network-security/fmc-7-2-4-logging-bug-connection-event-to-fmc-but-it-is-not/m-p/4938072#M1104948 CentroComunicazioni04877 2023-10-11T12:50:28Z https://community.cisco.com/t5/network-security/fmc-7-2-4-logging-bug-connection-event-to-fmc-but-it-is-not/m-p/4938079#M1104950 <P>I'm facing the same issue with FMC 7.2.4. Despite configuring logging to send connection events only to the syslog, they are still being forwarded to the FMC. This is causing the database to fill up quickly and reducing the Event Capacity to just a few days. Is this a known bug or is there a workaround?</P><P>Any suggestions would be greatly appreciated.</P><P>&nbsp;</P><P>&nbsp;</P><P><FONT size="1 2 3 4 5 6 7"><A href="https://kiwilab.pl/" target="_self">kiwilab.pl</A>&nbsp;</FONT></P><P>&nbsp;</P> Wed, 11 Oct 2023 12:57:38 GMT https://community.cisco.com/t5/network-security/fmc-7-2-4-logging-bug-connection-event-to-fmc-but-it-is-not/m-p/4938079#M1104950 sadiakeelyn 2023-10-11T12:57:38Z https://community.cisco.com/t5/network-security/fmc-7-2-4-logging-bug-connection-event-to-fmc-but-it-is-not/m-p/4938422#M1104958 <P>Assuming there are no overrides (click "Show Overrides" to verify), the configuration shown by <a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/1081846">@CentroComunicazioni04877</a> should prevent the FMC from getting connection event logs for a given rule. You can look at the table view of connection events and verify the specific rule(s) that are sending the events.</P> <P>The release notes for 7.2.4, 7.2.4.1 and 7.2.5 don't list any bug (open of fixed) for this issue. I have not seen it on numerous FMCs that I have setup and operated.</P> <P>You should open a TAC case if my first suggestion doesn't resolve the issue.</P> Thu, 12 Oct 2023 03:04:48 GMT https://community.cisco.com/t5/network-security/fmc-7-2-4-logging-bug-connection-event-to-fmc-but-it-is-not/m-p/4938422#M1104958 Marvin Rhoads 2023-10-12T03:04:48Z https://community.cisco.com/t5/network-security/fmc-7-2-4-logging-bug-connection-event-to-fmc-but-it-is-not/m-p/4938798#M1104961 <P>Hi Marvin,<BR />thanks for your feedback. The configuration has no overrides. I will proceed to open a TAC case. Greetings</P> Thu, 12 Oct 2023 07:32:36 GMT https://community.cisco.com/t5/network-security/fmc-7-2-4-logging-bug-connection-event-to-fmc-but-it-is-not/m-p/4938798#M1104961 CentroComunicazioni04877 2023-10-12T07:32:36Z https://community.cisco.com/t5/network-security/fmc-7-2-4-logging-bug-connection-event-to-fmc-but-it-is-not/m-p/5232035#M1117963 <P>Hi there,</P><P>I'm seeing similar behaviour, did you get a resolution to this?&nbsp;</P><P>Many thanks,</P><P>Tim</P> Tue, 03 Dec 2024 17:13:49 GMT https://community.cisco.com/t5/network-security/fmc-7-2-4-logging-bug-connection-event-to-fmc-but-it-is-not/m-p/5232035#M1117963 TODavies 2024-12-03T17:13:49Z