Solved: CSF 1210 CE FTD Event viewer problem

Brunetta7 · ‎06-12-2025

Good morning everyone,
I noticed that on my CSF 1210 CE FTD, using the Firewall Device Manager, Monitoring - Event viewer section,
events are received and displayed only if the page is open.
It is not possible to view events that occurred when I am not connected to the firewall device manager (for example two hours before)
Is this normal behavior or is there a problem?
How can I view all the logs for which I have enabled tracking?
Thanks to anyone who can give me some information.
Have a nice day

Marvin Rhoads · ‎06-18-2025

FDM only displays real time logs. It does not show anything historical. As you surmised, you would have to use a different solution such as FMC (either on-premises or cloud-delivered as part of Security Cloud Control), external syslog server, etc. to retain and query historical data.

View solution in original post

ahollifield · ‎06-13-2025

Friends don't let friends use FDM. Use FMC.

Brunetta7 · ‎06-16-2025

Sorry, I don't understand.

Does this mean that FDM is not working well and that to get the previous logs I have to use FMC or a SYSLOG Server?

Marvin Rhoads · ‎06-18-2025

FDM only displays real time logs. It does not show anything historical. As you surmised, you would have to use a different solution such as FMC (either on-premises or cloud-delivered as part of Security Cloud Control), external syslog server, etc. to retain and query historical data.