topic Cisco Security Manager eventing database in Network Security

Cisco Security Manager eventing database

bidyutkumarmondal — Fri, 21 Feb 2020 12:52:48 GMT

Hello Experts,

Can anyone tell me where is the centrailised location for all the events which are comming from different devices are saved into CSM databse.

can i be able to read events from them, or the whole database can be used to migrate to some other CSM box.

Cisco Security Manager eventing database

Marvin Rhoads — Mon, 29 Apr 2013 12:27:32 GMT

By default they are saved to an Event Management database and, optionally, archived to an extended store. You can see the settings for your installation via the Security Manager Administration setttings page as shown below (click image for larger view):

Cisco Security Manager eventing database

bidyutkumarmondal — Mon, 29 Apr 2013 12:46:06 GMT

Hi Marvin,

Thanks a lot for your reply.

But when I navigate to the folder mentioned in the path of eventing\database it contains some .cfs file which are indexing files & not a human redable format.

So I wonder can you please provide me a way to access Event Management database.

Re: Cisco Security Manager eventing database

Marvin Rhoads — Mon, 29 Apr 2013 13:18:56 GMT

That's the purpose of the CSM Event Viewer application - as responded in the earlier thread you started.

https://supportforums.cisco.com/thread/2212424?tstart=0

Cisco Security Manager eventing database

bidyutkumarmondal — Mon, 29 Apr 2013 13:23:34 GMT

Hi Marvin,

I want to have a database access or a file acess from where i can read events & not from event viwer. Is there is any way for it.

Cisco Security Manager eventing database

Marvin Rhoads — Mon, 29 Apr 2013 13:27:09 GMT

No, there's no supported way. The closest thing you could do would be to send your syslogs to a separate syslog server server and look at the raw syslog file.

Why would you want to though? That's one of the reasons why you pay Cisco for the CSM product.