FMC monitoring and reporting

[Steven Williams]

I am slightly new to the FMC product and I have learned to do things like policies and device administration. Now I am looking at how to see what is going on. I created a policy on a new set of ASAs/SFRs that is in "monitor" mode because I want to see whats talking to what, How can I see a report on just these devices and whats going on?

[jlinder]

Yea your only going to see traffic that your logging. One feature that may help you with reporting is when you navigate to Analysys\Search and your filtering on connection events. You can then click the link at the top right of the page that says "Report Designer", which will open a custom report based on the filters you have configured in your search. Hope this helps!

[Steven Williams]

So I cant see anything in monitor mode? Seems ironic no?

I also don't see any option of reports on the Analysis>Search area.

[jlinder]

Actually monitor is an action type so believe it or not if its not set to log that acl rule under logging then I don't believe you'll see any events. Unless Cisco has updated something, but that's how my setup used to work.

After you navigate to Analysis>Search> you can select connection events in the drop down box and then hit the search button. Then once you see the connection events listed you can open the Report Designer.