Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Unknown source in alert

What does it mean when an alert lists 0.0.0.0 as the source that triggered the signature?

1 REPLY
Silver

Re: Unknown source in alert

This usually means the signature has summarized a group of alarms. To check if this is the case, set the signature to "Fire All". If it quits happening, then this is definitely the issue. You might have to do a Fire All if you want to see the Source IPs. Or you may have to change the summary key.

132
Views
0
Helpful
1
Replies
CreatePlease login to create content