cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
794
Views
0
Helpful
1
Replies

FMC Log4j report

Frank Osberg
Level 4
Level 4

Hi guys,

 

So I am trying to generate a report that can show all intusion on the log4j that has been blocked, but I have a hard time figuring it out how to make the report.

Has anybody made a report that can show me the info here?  

 

Hope someone can help out here. 

 

Thanks 

 

Frank

1 Reply 1

atsukane
Level 1
Level 1

I'm trying to figure this out too, I'm guessing creating a specific report template but not sure what to chose unless adding all Log4j related Snort instance ID?

I can see some events in the Intrusion Event Statistics or under the Analysis Dashboard but good to see a report.

 

Review Cisco Networking for a $25 gift card