FMC syslog

[Irakli G.]

Hello everyone reading this post,

I am taking the first steps in FMC administration. I want to send syslog to an external server.I am using the Firepower Management Center Configuration Guide, Version 6.6 documentation... to be more precise this link: https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/system_configuration.html#concept_E5280C15B8504B5E8DD51C1F7C2DC782

The problem is that when I change the Facility and Severity values, the result is still the same: the server receives too many syslog messages from all Facility and Severity levels. 

I get exactly the same picture in the syslog messages sent locally to the FMC (System > Monitoring > Syslog).

Here I upload FMC configuration and server screenshots:

[balaji.bandi]

can you post the screenshot what you have configured. give the steps.

i have tested they send as expected. 6.7 version

[Irakli G.]

Thanks for the feedback. I have added pictures to my original post.

[Rodrigo Gurriti]

I have the same issue, is there a fix? 
FMC sends everything, not only audit logs. 

[balaji.bandi]

if you using same version yes, if you have 7.X may be some new features added