topic Re: Event retrieval in Network Security https://community.cisco.com/t5/network-security/event-retrieval/m-p/1346067#M76851 <HTML><HEAD></HEAD><BODY><P>Thanks for the reply. </P><P>i tried receiving events with an CA`s snmp receiver but the events i m receiving are not readable .. </P><P>can u sugggests any receiver.</P></BODY></HTML> Sun, 28 Jun 2009 08:16:35 GMT manmeetshergill 2009-06-28T08:16:35Z Event retrieval https://community.cisco.com/t5/network-security/event-retrieval/m-p/1346065#M76849 <P>Hi, </P><P>i am running a network having 30 IPS (which indcludes SSM20s, IDSMs and IPS 44XX).</P><P>i dont have mars device. Is there any way to retrieve events from all the IPS to one central location using csmanager ??</P><P>or is there any freeware that can do the job. </P><P></P><P>Thanks in advance </P> Sun, 10 Mar 2019 11:40:51 GMT https://community.cisco.com/t5/network-security/event-retrieval/m-p/1346065#M76849 manmeetshergill 2019-03-10T11:40:51Z Re: Event retrieval https://community.cisco.com/t5/network-security/event-retrieval/m-p/1346066#M76850 <HTML><HEAD></HEAD><BODY><P>CSM doesn't collect events, it can only be used to manage the signatures and configurations on your sensors. To collect events you'll need a SIM like MARS, NetForenisics, Intelitactics that has an SDEE (version 7.x has a newer protocol that is backards compatible with SDEE, I forget it's name) listener.</P><P>There were some open source pieces you could try to put together yourself, but nothing I know of that is preassembled.</P><P>Alternately, you could option all your enabled signatures to fire off an SNMP trap and collect those with a free SNMP receiver. </P></BODY></HTML> Fri, 26 Jun 2009 14:12:45 GMT https://community.cisco.com/t5/network-security/event-retrieval/m-p/1346066#M76850 rhermes 2009-06-26T14:12:45Z Re: Event retrieval https://community.cisco.com/t5/network-security/event-retrieval/m-p/1346067#M76851 <HTML><HEAD></HEAD><BODY><P>Thanks for the reply. </P><P>i tried receiving events with an CA`s snmp receiver but the events i m receiving are not readable .. </P><P>can u sugggests any receiver.</P></BODY></HTML> Sun, 28 Jun 2009 08:16:35 GMT https://community.cisco.com/t5/network-security/event-retrieval/m-p/1346067#M76851 manmeetshergill 2009-06-28T08:16:35Z Re: Event retrieval https://community.cisco.com/t5/network-security/event-retrieval/m-p/1346068#M76852 <HTML><HEAD></HEAD><BODY><P>You may use OpenNMS as free traps receiver.</P></BODY></HTML> Mon, 19 Oct 2009 11:40:06 GMT https://community.cisco.com/t5/network-security/event-retrieval/m-p/1346068#M76852 andrey.dugin 2009-10-19T11:40:06Z