cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
369
Views
1
Helpful
3
Replies

CSF 1210 CE FTD Event viewer problem

Brunetta7
Level 1
Level 1

Good morning everyone,
I noticed that on my CSF 1210 CE FTD, using the Firewall Device Manager, Monitoring - Event viewer section,
events are received and displayed only if the page is open.
It is not possible to view events that occurred when I am not connected to the firewall device manager (for example two hours before)
Is this normal behavior or is there a problem?
How can I view all the logs for which I have enabled tracking?
Thanks to anyone who can give me some information.
Have a nice day

1 Accepted Solution

Accepted Solutions

FDM only displays real time logs. It does not show anything historical. As you surmised, you would have to use a different solution such as FMC (either on-premises or cloud-delivered as part of Security Cloud Control), external syslog server, etc. to retain and query historical data.

View solution in original post

3 Replies 3

Friends don't let friends use FDM. Use FMC.

Sorry, I don't understand.

Does this mean that FDM is not working well and that to get the previous logs I have to use FMC or a SYSLOG Server?

FDM only displays real time logs. It does not show anything historical. As you surmised, you would have to use a different solution such as FMC (either on-premises or cloud-delivered as part of Security Cloud Control), external syslog server, etc. to retain and query historical data.

Review Cisco Networking for a $25 gift card