Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Mars Events ?

Hello there

I want to know if I can run a query for certain event and get a list of events instead of a report and graph ? now I get only graphs ?

1 REPLY

Re: Mars Events ?

Hi,

You can do it from Query/Report utility.

1) On the Query/ Reports tab, from the first drop down box, select "Activity: All Events and Netflow Top Destination Ports"

2) Then Click on the "Edit" button in the green box in the middle of the page. A new Green box appears.

3) Under "Result Format", select: "All Matching Events"

4) Under 'Order/Rank by', select: "Time"

5) Under 'Filter by Time', select: "Last 1 hour" (assuming you want to get specific events in the past hour"

6) Click Apply

7) Click Submit Inline

You can save this query as report or as your new rule.

Change the source or destination with specific IP, or you can also drill down to service port.

Hope this helps.

Rgds,

AK

102
Views
3
Helpful
1
Replies
CreatePlease login to create content