cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
543
Views
0
Helpful
1
Replies

View device logs in CSMARS

tech_trac
Level 1
Level 1

Hi,

Is there a way to view all the device logs collected by CSMARS on MARS GUI interface. Is so, how can it be done ?

Thanks

1 Accepted Solution

Accepted Solutions

sadbulali
Level 4
Level 4

Go to the query Page -> select the "All matching events" or "All matching raw messages" and click Reporting device filed, select the ASA device You can see all the events from the particular ASA only

STEPS TO VIEW FOR THE ENTIRE DEVICE

Click on the Query/Reports Tab

Edit the Query Type

Change Result Format to "All Matching Events" or "All Matching Events Raw Messages"

Select the Time parameters of your query (past 1 day, or date range, or real time, etc.)

Click Apply

Click on "ANY" under the Device field of the query Change the "All Variables" drop down to "All Reporting Devices" or a specific device type.

Add the specific device(s) to the left column and remove "ANY"

Click Apply

Click on Submit Inline to run the query

View solution in original post

1 Reply 1

sadbulali
Level 4
Level 4

Go to the query Page -> select the "All matching events" or "All matching raw messages" and click Reporting device filed, select the ASA device You can see all the events from the particular ASA only

STEPS TO VIEW FOR THE ENTIRE DEVICE

Click on the Query/Reports Tab

Edit the Query Type

Change Result Format to "All Matching Events" or "All Matching Events Raw Messages"

Select the Time parameters of your query (past 1 day, or date range, or real time, etc.)

Click Apply

Click on "ANY" under the Device field of the query Change the "All Variables" drop down to "All Reporting Devices" or a specific device type.

Add the specific device(s) to the left column and remove "ANY"

Click Apply

Click on Submit Inline to run the query

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: