Guest

Preview Tool

Cisco Bug: CSCvv36386 - Toggle button to control export behaviour of eventlogs to one FMC(in HA only)

Last Modified

Aug 14, 2020

Products (1)

  • Sourcefire Defense Center

Known Affected Releases

6.4.0 6.5.0

Description (partial)

Symptom:
The current behavior is of Firepower product with FMC HA is that the event logs are exported to both the FMCs(Active and standby) from managed devices, which kills a lot of network bandwidth and doesn't not add much value, in fact complicates when integrated with encore, as duplication of logs occurs on the Encore and SIEM, as both the Active and Standby FMCs are sending duplicate logs, if both the FMCs are not integrated we see a loss of events on SIEM upon FMC failover.

Conditions:
FMC with HA
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.