All, I know this is a simple question. I know that logging is enabled on the Firepower but unsure of how to check "what" is being alerted on? Any help?
I actually found what I was looking for under Policy --> Action --> Alerts --> AMP Alerts and Policy --> Access Control ---> Intrusion.Thanks for your response.
I am looking at the FMC, but I am not looking at the log. I know we are sending events to syslog but specifically what events is what I am trying to find out.
