2 Replies Latest reply on Aug 19, 2016 1:12 PM by davidmol

    SIEM IPS Sensor Hardware Events

    davidmol

      Hi,

       

      I have configured the sourcefire ips via syslog, i can see correctly all the events of associated devices to ips , but i can't see the events about the sensor.  I need to get hardware events from the ips sensor (start, restart, shutdown, fails, etc) to create alarms of this device.

      .

      This is the data source configuration:

       

       

       

      Regards,

      Cristian David