cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted
sajin
Iron

Smart Event not showing Accepted Log

Smart Event not showing Accepted and the Clean up rule is ANY ANY ALLOW. 

In the Event when i select the policy package in the filter, the ACCEPT logs shows 0. I changed the Log  to Detailed and Extended and after the Accept log was available but when expanding the logs again it shows only DETECT logs.

Please any one help on this issue.

Tags (1)
0 Kudos
4 Replies
Admin
Admin

Re: Smart Event not showing Accepted Log

Generally firewall logs are NOT correlated by SmartEvent by default.
They must be enabled in the Event Policy.
sajin
Iron

Re: Smart Event not showing Accepted Log

Is the above solution works for Rule Name and Rule Number Filter as am not able to filter with these two option.

0 Kudos
Admin
Admin

Re: Smart Event not showing Accepted Log

You need to ensure Firewall Sessions are correlated (they are not by default).
Click on Logs and Monitor > New Tab > SmartEvent Settings and Policy and enable Firewall Sessions as shown.
Push the Event Policy afterwords.

Capture.PNG

Employee
Employee

Re: Smart Event not showing Accepted Log

SE does not correlate standard fw logs by default.
0 Kudos