2 Replies Latest reply on Aug 19, 2016 1:12 PM by davidmol

    SIEM IPS Sensor Hardware Events




      I have configured the sourcefire ips via syslog, i can see correctly all the events of associated devices to ips , but i can't see the events about the sensor.  I need to get hardware events from the ips sensor (start, restart, shutdown, fails, etc) to create alarms of this device.


      This is the data source configuration:





      Cristian David