06-12-2025 07:18 AM
Good morning everyone,
I noticed that on my CSF 1210 CE FTD, using the Firewall Device Manager, Monitoring - Event viewer section,
events are received and displayed only if the page is open.
It is not possible to view events that occurred when I am not connected to the firewall device manager (for example two hours before)
Is this normal behavior or is there a problem?
How can I view all the logs for which I have enabled tracking?
Thanks to anyone who can give me some information.
Have a nice day
Solved! Go to Solution.
06-18-2025 08:19 AM
FDM only displays real time logs. It does not show anything historical. As you surmised, you would have to use a different solution such as FMC (either on-premises or cloud-delivered as part of Security Cloud Control), external syslog server, etc. to retain and query historical data.
06-13-2025 08:31 AM
Friends don't let friends use FDM. Use FMC.
06-16-2025 08:13 AM
Sorry, I don't understand.
Does this mean that FDM is not working well and that to get the previous logs I have to use FMC or a SYSLOG Server?
06-18-2025 08:19 AM
FDM only displays real time logs. It does not show anything historical. As you surmised, you would have to use a different solution such as FMC (either on-premises or cloud-delivered as part of Security Cloud Control), external syslog server, etc. to retain and query historical data.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide