IDS Cisco Security Monitor Reports

[cweatherford]

I have noticed that any report that I run does NOT report ALL alarms listed in the event viewer. Has anyone else seen this? I have removed and re-added the sensor and re-checked all my settings, everything looks ok.

Thanks!

[ynagaraj]

Hi ,

While generating reports , "High" , "Medium" event severities will be selected by default.

So you will see events with severity "Medium" , "High" in the generated report.

If one wants to see all alarms from the sensor(s) , either all event severities or none should be selected while generating the report.

Thanks,

Nagaraju Y.

[cweatherford]

I failed to mention the details of what options I chose:

I selected all on every option. All data, all time, all signitures, all alarms (info on up).

A for instance would be that the default SA password alarm was visible in the event viewer but does not show up in reports that I run.

[cweatherford]

FYI:

This is a bug in the software. The work-around is to NOT select the signature or types of signature. Leave them blank. You can choose the sensor and the level of alarm (low, medium...).