Hello,
I am currently trying to setup syslog events for CLI logins either via ssh or console, we would like to see all successful and failed attempts.
I made an event for 605004-5 & 611101-4 ID's but it looks like that just tells all logins to the FMC not the CLI. I looked thoroughly through the documentation but could not find any other matching ID's for what I am looking for. Can anyone please direct me on how this could be setup or if a device limitation. Thank you in advance!
https://www.cisco.com/c/en/us/td/docs/security/firepower/Syslogs/b_fptd_syslog_guide/syslogs-sev-level.html?bookSearch=true
