Forum Discussion
Cisco ASA integration
Hello Have managed to get logs into Sentinel, and can see them in Analytics and in the events list and graph, but none of the other metric return anything other than 'the query returned no result...
saint_stevo One thing we noted on our setup was event IDs were missing.
Did you have a solution?
- Nope, we just did a quick ingestion of the ASA logs to see what they looked like. We filtered the logs based on VPN connnection messages so it worked for our purpose. To move forward in a production setup we would have needed to solve that event ID issue.