Fire Power syslog

[asma0alhamed]

We have Fire Power and we are try to forward logs to the SIEM ,

But for unknown reason we can't see any logs in SIEM

Is there any way to change the user root ? , I Think this user is deleted before long time !

[balaji.bandi]

is this working and failed to send logs to syslog server., or never worked before ?

check any Firewall or anything dropping between FMC and syslog ?

follow below guide to send logs :

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200479-Configure-Logging-on-FTD-via-FMC.html