cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
224
Views
0
Helpful
2
Replies
Highlighted

Cisco IME - Show trigger packet

I have a question and my Google fu isn't giving me the answer.

What do I need to do to see a trigger packet when I select an event, show event, Trigger packet? I've ran IP logging for the IP listed in the event and it's still grayed out. 

Thanks!

1 ACCEPTED SOLUTION

Accepted Solutions
VIP Mentor

Using IP Logging is wrong

Using IP Logging is wrong option to see the trigger packet. You need to use the Event-Action "Produce verbose Alert" to see them. You can use Event-Action-override to set this action to all your events.

View solution in original post

2 REPLIES 2
VIP Mentor

Using IP Logging is wrong

Using IP Logging is wrong option to see the trigger packet. You need to use the Event-Action "Produce verbose Alert" to see them. You can use Event-Action-override to set this action to all your events.

View solution in original post

Sorry for the late response.

Sorry for the late response. Thanks! That was exactly what I needed.

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here