Forum Discussion

J_Bailey's avatar
J_Bailey
Copper Contributor
Feb 20, 2019

Any way to view log data being collected?

Hi,   Got my first Data Source and Log Collector up and running yesterday, and have collected 221 logs, but no data is being displayed on my dashboard.  Is there a way to view this data and re-impo...
Cloud App Security
Cloud Discovery
J_Bailey's avatar
J_Bailey
Copper Contributor

I haven't done it yet but was suggested in using the custom upload and making a snapshot report I believe to try and filter the data. I need to do a few things first, since there is no native syslog export from Watchguard, I want to make sure the data I'm uploading is going to be in same format. I'm writing  a generic syslog collector and am hoping to have some results by end of week.  Thanks for following up.

Oztourist's avatar
Oztourist
Copper Contributor
Nov 29, 2020

J_Bailey 

Hi mate, 

I am running Watchguard XTM firewalls, I was wondering if you made any progress and also noticed there is now native support for Watchguard XTM devices.

  • Boris_Kacevich's avatar
    Boris_Kacevich
    Icon for Microsoft rankMicrosoft
    Nov 30, 2020

    Oztourist 

     

    Watchguard XTM log format is now supported out of the box.

     

    Best,

    Boris K

    • stierer54's avatar
      stierer54
      Copper Contributor
      Dec 07, 2020

      Boris_Kacevich Saw this too, although have difficulty getting it to work..

      I've gone down the route of setting up Ubuntu in Azure with a Docker log collector but Cloud App Security doesn't seem to pick anything up.

      Firebox seems to be configured to send logs to it correctly.

      Google doesn't come back with much 😞 

      • Plops's avatar
        Plops
        Copper Contributor
        Jan 11, 2021

        stierer54  I have done the same as you and not seeing any data in the CAS portal. I raised it with my WatchGuard contact and he has advised be they have a known issue with Microsoft to correct this issue. I am waiting for more details back about the issue and the expected ETA on a fix.

Resources