Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

CSA 4.5.1 alert logging

Our CSA MC skipped logging for a few hours. When I search the event log I have alerts for that time. Is there a way to extract/export this?

3 REPLIES
Community Member

Re: CSA 4.5.1 alert logging

Just to clarify, you are saying that your MC was offline for a few hours and so the CSA clients did not report their events to the MC during that time. But when you look at the event log on the client host, you see events for CSA. And you want to know how to get those events to the MC?

Please correct me if I completely missed the boat.

Community Member

Re: CSA 4.5.1 alert logging

No the MC was up the whole time. We log alerts to another share, and sometimes it'll lose connection or something, so I can still see the events in the MC, but they weren't logged. If possible I need to get those alerts logged to file after the fact.

Community Member

Re: CSA 4.5.1 alert logging

Can you export a report for that time frame of missed events into Excel format?

146
Views
0
Helpful
3
Replies
CreatePlease to create content