FMC Log4j report

[Frank Osberg]

Hi guys,

So I am trying to generate a report that can show all intusion on the log4j that has been blocked, but I have a hard time figuring it out how to make the report.

Has anybody made a report that can show me the info here? 🙂 

Hope someone can help out here. 

Thanks 

Frank

[atsukane]

I'm trying to figure this out too, I'm guessing creating a specific report template but not sure what to chose unless adding all Log4j related Snort instance ID?

I can see some events in the Intrusion Event Statistics or under the Analysis Dashboard but good to see a report.