I have several clients reporting security events in the Security Center of the MX100. If I go into the client and check the security event log in the client detail, no events are listed event though the date range is correct.
Any help would be greatly appreciated.
Thank you
Steve
Solved! Go to solution.
Security events normally appear in the Security Event log under:
Security & SDWAN/Security Centre/Events (tab at the top)
Are you looking at similar time spans? Like a day or week in both cases?
I have the same. I have an event for one of my wired clients in security center. But if I go to the normal event log in Network-wide > Event-log can't find that event either. Whatever I select as source in the drop-down (for switches or for security appliances).
It's probably a bug as I would expect them to appear in the normal log as well... seeing as there are filter categories for them (e.g. "security blocked file" would be the relevant one for my event).
I'd open a support ticket.
Security events normally appear in the Security Event log under:
Security & SDWAN/Security Centre/Events (tab at the top)
Thank you, As you indicated, I needed to select events and not summary. Thanks.
Take a look at the accepted solution in this tread. I had to select events, the summary was selected.