I'm running Threat Response and am getting alarms that when investigated search for the web logs but can't find them on the servers. I don't see where you can configure anything for this. I know TR is logging in to the server.
Which will work in most default situations. Unfortunately, most of the configuration information is stored in the IIS metabase on the target system and not in the registry. So if the user changes the location of the log files in the metabase, that change is not reflected in the registry. They can work around this problem by manually changing the registry.
If the target system is running Apache, we look at the following location:
To get the installation directory, and then append "\logs" to that path. This should work in most default situations.
I do have the logs saved in the default location but there are multiple log file directories since I am running multiple web sites on the same server. CTR can't figure out which set of logs to look at. Is there any way to define multiple log file paths when there are multiple web sites running on the same server under IIS? The registry only allows me to set one path so the web logs for only one web site could be found.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in HA
DocumentationCode download linksGoalRequirementLimitationsSupported ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and UCS-E Blades:Step by Step ConfigurationCo...
I am currently unable to specify "crypto keyring" command when configuring VPN connection on my cisco 2901 router.
The following licenses have been activated on my router :