cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
311
Views
0
Helpful
3
Replies

How to create a Dashboard in FMC showing specific custom SNORT 3 rules

I am trying to create custom dashboard showing how many times specific local custom SNORT 3 rules are meet.  I would like to see the SNORT ID and number of events triggers as a result of this rule.

My device is currently running:

Cisco Firepower 4120 Threat Defense

Currently running software version: 7.4.0

Currently installed VDB version: build 384

Part of our anlysis idea is to make custom dashboards displaying custom SNORT 3 rules that we make in response to specific threats.  In the end there might be multiple SNORT 3 rules we want to display for a certain threat type and have this information updating.

Thank you in advance for any ideas or suggestions.

3 Replies 3

check this slide from Ciscolive 
MHM

Screenshot (709).png

Thank you for the reply.  It is my understanding this screen shot is showing so to select the default dashboard.  I want to build a widget to add to my dashboard that shows the number of times my custom SNORT 3 rules are triggered.

There is many options under dashboard settings' check see if one is what you looking for.

MHM

Review Cisco Networking for a $25 gift card