IPS 4260 - view events actions taken

Unanswered Question
Mar 17th, 2008

Hi,

I have a IPS 4260 running 6.0(3) E1.

How i do view all the events actions taken?

ie Deny Attacker inline,Deny Packet inline

cash

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
rhermes Wed, 03/19/2008 - 12:40

If you're on the CLI, you can try:

show events alerts past 23:59 | include Deny

The 6.0 Command Reference infers the "include-traits" may also give you what you want. Unfortunately, I can't the trait to number table anywhere.

show events alerts include-traits #

where the # is 0-15 represent the traits you'd liked displayed.

Show Event Command

http://www.cisco.com/en/US/docs/security/ips/6.0/command/reference/crCmds.html#wp439833

Actions

This Discussion