08-01-2018 03:15 AM - edited 07-05-2021 08:55 AM
Our end client has configured an external syslog server(SIEM) in the Cisco prime infrastructure.
And for testing purpose, he has tried login in to the Cisco prime with wrong credentials.
In the syslog server, although he is getting logs for bad authentication, but he is not getting the expected logs (like which User not able to authenticate, username is not showing)
Can any one help me in this.
Below are the prime details -
--------------------------------------------
Cisco Prime Infrastructure
********************************************************
Version : 3.4.0
Build : 3.4.0.0.348
Device Support:
Prime Infrastructure 3.4 Device Pack 1 ( 1.0 )
02-14-2019 05:46 AM
02-14-2019 05:58 AM
02-14-2019 07:04 AM
02-15-2019 03:33 AM
02-15-2019 03:58 AM
02-15-2019 05:26 AM
02-15-2019 05:27 AM
02-15-2019 05:27 AM
02-19-2019 04:26 AM
02-19-2019 04:44 AM
02-20-2019 12:25 AM
02-20-2019 01:49 AM
02-20-2019 02:31 AM
02-20-2019 04:13 AM
02-20-2019 04:30 AM
Ok, that's good.
Now, when you are in the Syslog Viewer, make sure you have selected one of the devices in the Filter Criteria in the top right, see attached image.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide