I am troubleshooting an issue where syslog messages from a firewall do not include the configured hostname or any other device identifier.
The affected device is a Cisco Secure Firewall 1220CX running FTD 7.6.2-329.
The hostname is configured on the device, but the generated syslog messages contain no hostname in the header. The current logging configuration includes syslog forwarding to a remote server, and show logging reports:
Based on my understanding, the firewall is therefore sending syslog messages without a Device ID, which prevents the hostname from appearing in syslog headers.
I have not found an option in the FDM GUI to explicitly enable the Device ID or hostname for syslog messages.
Questions:
- Is it possible to configure the Device ID (or hostname) for syslog messages on an FDM-managed FTD firewall?
- If so, where can this be configured?
- Are there any known limitations or alternative approaches?
Any guidance would be appreciated.