How to create audit report

[kovitking]

Hi All,

I need to create report of audit log.

The content of this report should include user(admin) activities that they change on firepower management such as edit policy edit signature..etc.

Please recommend for the solutions.

Thank you

[Ajay Saini]

Hello,

You can refer to below document:

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/fpmc-config-guide-v60_chapter_01110101.html

First you need to go to System > Monitoring > Audit. Here you can see the audit events and also create a report. I tried and it works. Just that the events can tell us that what a user did - like IPS config change etc but not the details like what specific change was made.

I will try and see if the details can be incorporated in the meantime.

HTH
AJ