cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
278
Views
0
Helpful
1
Replies

IPS 4260 - view events actions taken

cashqoo
Level 1
Level 1

Hi,

I have a IPS 4260 running 6.0(3) E1.

How i do view all the events actions taken?

ie Deny Attacker inline,Deny Packet inline

cash

1 Reply 1

rhermes
Level 7
Level 7

If you're on the CLI, you can try:

show events alerts past 23:59 | include Deny

The 6.0 Command Reference infers the "include-traits" may also give you what you want. Unfortunately, I can't the trait to number table anywhere.

show events alerts include-traits #

where the # is 0-15 represent the traits you'd liked displayed.

Show Event Command

http://www.cisco.com/en/US/docs/security/ips/6.0/command/reference/crCmds.html#wp439833

Review Cisco Networking products for a $25 gift card