Meraki IDS Events without pcap

[mugen]

Hi guys,

Does anybody know why there are IDS events without a pcap? 

It happens, that there are identical events, but one with pcap and one without? 

As far as i understand, you dont have to explicit turn on those captures (also i did not find something like a checkbox to do it....) for IDS events and now i would like to know how i get always pcaps to the events, because without a analysis is not possible.

Many Thanks in advance!

[PhilipDAth]

Where are you seeing an option to download a pcap for an IDS event?  I've never seen that before.

[mugen]

You can go into the security center, mx events and then there is sometimes a pcap to analyze if you click on the event. You can also download it.

But unfortunaly it is only sometimes there......