Cisco High Speed Logging

[adkins5]

So I am trying to capture firewall logs from the Cisco SDWAN. The documentation says it uses HSL which is output in a netflow v9 format.

Is anyone collecting Cisco HSLs? Which netflow collector are you using, and is it allowing you to search to see if traffic is being blocked?

[balaji.bandi]

I have tried in Lab, but for other purpose, but the one looking is possible as per the guide :

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/m-firewall-17.html#GUID-8BD4EA5C-109F-44C6-B1C9-DF76D7D562EE