https://community.cisco.com/t5/network-security/cisco-ftd-local-login-syslog/m-p/5287284#M1120862 <P>Hello,</P><P>I am currently trying to setup syslog events for CLI logins either via ssh or console, we would like to see all successful and failed attempts.</P><P>I made an event for 605004-5 &amp; 611101-4 ID's but it looks like that just tells all logins to the FMC not the CLI. I looked thoroughly through the documentation but could not find any other matching ID's for what I am looking for. Can anyone please direct me on how this could be setup or if a device limitation. Thank you in advance!</P><P><A href="https://www.cisco.com/c/en/us/td/docs/security/firepower/Syslogs/b_fptd_syslog_guide/syslogs-sev-level.html?bookSearch=true" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/firepower/Syslogs/b_fptd_syslog_guide/syslogs-sev-level.html?bookSearch=true</A></P><P>&nbsp;</P> Fri, 02 May 2025 14:54:17 GMT Doopzzy 2025-05-02T14:54:17Z https://community.cisco.com/t5/network-security/cisco-ftd-local-login-syslog/m-p/5287284#M1120862 <P>Hello,</P><P>I am currently trying to setup syslog events for CLI logins either via ssh or console, we would like to see all successful and failed attempts.</P><P>I made an event for 605004-5 &amp; 611101-4 ID's but it looks like that just tells all logins to the FMC not the CLI. I looked thoroughly through the documentation but could not find any other matching ID's for what I am looking for. Can anyone please direct me on how this could be setup or if a device limitation. Thank you in advance!</P><P><A href="https://www.cisco.com/c/en/us/td/docs/security/firepower/Syslogs/b_fptd_syslog_guide/syslogs-sev-level.html?bookSearch=true" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/firepower/Syslogs/b_fptd_syslog_guide/syslogs-sev-level.html?bookSearch=true</A></P><P>&nbsp;</P> Fri, 02 May 2025 14:54:17 GMT https://community.cisco.com/t5/network-security/cisco-ftd-local-login-syslog/m-p/5287284#M1120862 Doopzzy 2025-05-02T14:54:17Z