cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
374
Views
0
Helpful
0
Replies
Highlighted
Beginner

Why can I only see ancient events in Firepower real time viewer via ASDM? it worked at deployment now it seems to have stopped

Hi All,

 

I have asa5516x with FP services but no FMC :( , therefore management is via ASDM and the real time even viewer is jammed in August (time of deployment) (note timestamp for refresh is today May19).  I have a monitor any any at top of policy to send to event viewer but its just no longer happening.  I have specific things sending to syslog happily but wanted to be able to view the overall in the ASDM like I used to but its stopped.  Could it be that a buffer is filled and isnt overwriting? a local logging service has stopped that I need to re-start?  I dont have auth from the customer to restart the entire FP instance so reaching out on here.  Any ideas?

 

Capture.PNG