Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IDS Cisco Security Monitor Reports

I have noticed that any report that I run does NOT report ALL alarms listed in the event viewer. Has anyone else seen this? I have removed and re-added the sensor and re-checked all my settings, everything looks ok.

Thanks!

3 REPLIES
New Member

Re: IDS Cisco Security Monitor Reports

Hi ,

While generating reports , "High" , "Medium" event severities will be selected by default.

So you will see events with severity "Medium" , "High" in the generated report.

If one wants to see all alarms from the sensor(s) , either all event severities or none should be selected while generating the report.

Thanks,

Nagaraju Y.

New Member

Re: IDS Cisco Security Monitor Reports

I failed to mention the details of what options I chose:

I selected all on every option. All data, all time, all signitures, all alarms (info on up).

A for instance would be that the default SA password alarm was visible in the event viewer but does not show up in reports that I run.

New Member

Re: IDS Cisco Security Monitor Reports

FYI:

This is a bug in the software. The work-around is to NOT select the signature or types of signature. Leave them blank. You can choose the sensor and the level of alarm (low, medium...).

96
Views
3
Helpful
3
Replies
CreatePlease to create content