FWSM syslogs are not shown in CSM 4.1 Event Viewer

[pweichmann]

I have CSM 4.1 event viewer and this should now support syslogs from FWSM. The FWSM context is now shown as monitored device under event viewer and I can see that the system receives the syslogs (packet capture on server).

But they do not show up? Why?

Rgds.

[sooprasa · Accepted solution]

What version is the FWSM running?

You can use Event Viewer with FWSM running software releases 3.1.17+, 3.2.17+, 4.0.10+, and 4.1.1+ only.

P.S.: please mark this thread as answered if you  feel your query is resolved. Do rate helpful posts.

[pweichmann]

This is ridiculous. What is the reason that an event viewer does not accept syslogs from previous releases?

Rgds.

[sooprasa]

Hello,

I really dont have much idea about what the reason could be, but this is a design issue and cant comment much on this.

What i feel is, it could be compatiblity issue.

Regards,

Sooraj

[pweichmann]

Well, it's only syslogs and the basic ingredients works with MARS or Qradar. So I wonder why Cisco is not wanting to support their gear. Syslogs are just text messages and the numbers have not changed even in the higher releases.

But management has always been Cisco's weak point.

[sooprasa]

As mentioned earlier, this is a design issue and there is not much i can comment about.

You may want to think about upgrading the FWSM version, as you will have a whole lot of new features in addition to the event viewer being supported on CSM 4.1