Forum Discussion
Snapshot report from 2 gb Cisco ASA Firewall logs only showing 8 Apps?
Hi all,
I have uploaded 2GB worth of FW logs from a Cisco ASA perimiter FW to create a MCAS snapshot report.
The network architect confirmed the log format is identical to the example one in the MCAS portal - it contains all Teardown TCP records.
Unfortunately the report only finds 8 cloud apps in total, which I seriously doubt is correct.
Do any of you guys have a clue on what could be causing only 8 apps to show on the snapshot report?
Br.
Lars
3 Replies
- Caroline_Lee
Microsoft
Lassekatten Hi, there is a size limit for each log upload (1GB), that could be the reason. Also, do the logs contain any entries outside of the 90 day period?
Link to snapshot doc: https://docs.microsoft.com/en-us/cloud-app-security/create-snapshot-cloud-discovery-reports
Caroline_LeeThanks a lot for the reply!
I have cut the log file into 500 mb files and the 2 GB is only from a 24 hour period approximately 2 weeks ago. So unfortunately I do not think that is the issue.
Br.
Lars
- Caroline_Lee
Lassekatten Hi Lars, since you've checked the log format, size and time period there's no reason I can think of as to why you're only seeing 8 apps. I'd recommend opening a support ticket for this issue.
