cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2834
Views
0
Helpful
1
Replies

How to forward the login logs from CISCO router to SIEM

We are able to receive all the logs from the roter but not able  to get the Login logs. Is there anything need to be done to forward the login logs to SIEM.

1 Reply 1

balaji.bandi
Hall of Fame
Hall of Fame

what is the router model and IOS running.

 

can you show Logging part of the config to verify 

 

example :

 

archive
log config
  logging enable
  notify syslog contenttype plaintext
  hidekeys
logging on
logging 192.168.1.1
login block-for 60 attempts 3 within 60
login on-failure log every 1
login on-success log every 1

BB

=====Preenayamo Vasudevam=====

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help