How to export (Backup) attack event on FMC

[peter.peng]

Hi Sir:

   After we setup Intrusion policy. We can find many attack event on Intrusion Events. How can we export (Backup) these event ?

If we backup by Firepower Management Backup tools . Does it backup these event ? or It just backup the configuration ?

[Abheesh Kumar · Accepted solution]

Hi,

You can backup the events as well from backup tab. You can also download specif high impacted logs from report designer. Go to Analysis > Intrusion events > Edit Search and select priority as high and filter it.

Then click Report Designer on the top right and generate report as you like with time-window.

Thanks,
Abheesh
PS: Please don't forget to rate and select as validated answer if this answered your question