1 of 1 people found this helpful
For network devices you need to go to manage -> appliances. Then set up your connector from there. Make sure the logging facility line in your router matches the log file.
logging facility local2
Then you need to set up a filter to capture the traffic. The easiest is to set up a new filter and choose any alert -> tool alias = "ASA" to match your connector alias. Alert.ToolAlias = *ASA*.
Thanks for the reply,
I didn't find where I can create the filter. Can you provide more details?
I have a connector already created and it is connected (I didn't create it).
Monitor -> Filters -> + sign -> new filter. Then under event groups highlight any alert and below that choose tool alias and drag it to your conditions. So it should read Any Alert.ToolAlias = (This is where you want to put the name of your alias in the connector). Name it and save it and you should start to see logs coming in provided your network device & connector are set up correctly.