05-14-2020 06:26 AM - edited 05-14-2020 10:54 PM
I tried to use CEF logs Consolidated Event Logs on Cisco Esa but unfortunately ESA only sends the logs that have Accept on Connection Behavior, but I need also logs with Reject Connection Behavior.
When I use normal syslog format, ESA send all logs, the issue is only on Consolidated Event Logs - CEF format.