Home
Support
Product Support
Security
Cisco Security Cloud Control
Configuration Guides

Cisco Security Cloud Control: Secure Firewall Device Management

How do I view live events?
How do I view historical events?
How do I filter event details?

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Cisco Security Cloud Control: Secure Firewall Device Management

How do I view live events?
How do I view historical events?
How do I filter event details?

Expand all sections

About this content

Introduction

Overview of Security Cloud Control Firewall Management

Configure basic settings

Overview of Cisco Security Cloud Control
Overview of Security Cloud Control Firewall Management
Overview of Cloud-Delivered Firewall Management Center
Provision Security Cloud Control Firewall Management
Open Security Cloud Control Firewall Management
The Firewall Management dashboard

Manage Firewall administration in Security Cloud Control Firewall Management

Configure general settings
Manage users and groups within Security Cloud Control organization
Manage API-Only users for Security Cloud Control Firewall Management
View Security Cloud Control notifications
View logging settings
Understand user roles in Security Cloud Control Firewall Management

Deploy and manage Secure Connectors for device onboarding

Introduction to Secure Connectors

Onboard devices in Security Cloud Control Firewall Management

Onboard FDM-Managed Device

Manage onboarded device settings

Changing a device's IP address in Security Cloud Control Firewall Management
Changing a device's name in Security Cloud Control Firewall Management
Export a list of devices and services
Export device configuration
External links for devices
Bulk reconnect devices to Security Cloud Control Firewall Management
Moving devices between organizations
Device certificate expiry detection
Write a device note
Delete a device from Security Cloud Control Firewall Management
Back up Firewall Threat Defense devices
Manage Firewall Threat Defense devices through Security Cloud Control Firewall Management
Security devices overview
Security Cloud Control Firewall Management labels and filtering
Use Security Cloud Control Firewall Management search functionality

Configuring FDM-Managed Devices

Interfaces
Synchronizing Interfaces Added to a Firepower Device using FXOS
Routing
FDM Policy Configuration
Templates
FDM-Managed High Availability
FDM-Managed Device Settings
Use the Security Cloud Control Command Line Interface Tool
Security Cloud Control Public API

Configure Network Address Translation for FDM-managed

Network Address Translation
Order of processing NAT rules
Network Address Translation wizard
Common use cases for NAT

Manage objects

Introduction to objects
Network objects
URL objects
Geolocation objects
DNS group objects
Certificate objects
Remote access VPN objects
Security zone object
Service objects
Security group tag group
Syslog server objects
Troubleshooting Objects

Backing Up FDM-Managed Devices

Backing Up FDM-Managed Devices

Upgrade FDM-Managed Device

FDM software upgrade paths
FDM-Managed device upgrade prerequisites
Upgrade a Single FDM-Managed Device
Bulk FDM-Managed devices upgrade
Upgrade an FDM-Managed High Availability pair
Upgrade to Snort 3.0
Revert from Snort 3.0 for FDM-Managed device
Schedule a security database update

Establish Site-to-Site VPN connection using Security Cloud Control Firewall Management

Introduction to Site-to-Site Virtual Private Network
Site-to-Site VPN concepts
Site-to-Site VPN configuration for FDM-Managed
Site-to-Site VPN Configuration for Cloud-Delivered Firewall Management Center-managed Firewall Threat Defense
Site-to-Site VPN for Secure Firewall ASA
Monitor Site-to-Site Virtual Private Networks

Establish Remote Access VPN connection using Security Cloud Control Firewall Management

Configuring Remote Access VPN for an FDM-Managed Device

Managing Virtual Private Network in Security Cloud Control

Remote access VPN session monitoring

Manage device configuration

Read, discard, and deploy configuration changes
Synchronizing configurations between Security Cloud Control and device

Monitor and report change logs, workflows, and jobs

Change logs in Security Cloud Control
Change log entries after deploying to FDM-Managed device
Change log entries after reading changes from an FDM-Managed device
View change log differences
Change request management
Export the change log
FDM-Managed device executive summary reports
Jobs monitoring in Security Cloud Control
Monitor workflows in Security Cloud Control

Secure Event Connectors

Secure event connectors
Secure event connector installation
Secure event connector removal
Finding your device's TCP, UDP, and NSEL port used for secure logging analytics (SaaS)

Security Analytics and Logging Licenses

Security Analytics and Logging licenses

Secure Logging Analytics (SaaS) for FDM-Managed Devices

About Secure Analytics and Logging (SaaS) for FDM-Managed Devices
About Secure Analytics and Logging (SaaS) for FDM-Managed Devices
Implementing Secure Logging Analytics (SaaS) for FDM-Managed Devices
Send FDM events to Security Cloud Control event logging
Send FDM-Managed Events Directly to the Cisco Cloud

Events in Security Cloud Control

About Security Analytics and Logging (SaaS) in Security Cloud Control
Event types in Security Cloud Control
Deprovisioning Cisco Security Analytics and Logging (SaaS)

View Events in Security Cloud Control Firewall Management

View live events
View historical events
Customize the events view
Show and hide columns on the event logging page
Change the time zone for the event timestamps
Create and save customizable event filters
Event logging page search and filter functionality
Event attributes in security analytics and logging

Terraform

About Terraform

Troubleshooting

Troubleshoot a Secure Device Connector
Troubleshoot a Secure Event Connector
Troubleshoot Security Cloud Control
Device connectivity states

FAQ and support

Security Cloud Control
FAQ about onboarding devices to Security Cloud Control
Device types
Security
Troubleshooting
Terminologies and definitions used in Zero-Touch Provisioning
Policy optimization
Connectivity
Complete the initial configuration of a Secure Firewall Threat Defense device using the CLI
What does it mean to be FedRAMP certified
About Data Interfaces
How Security Cloud Control processes personal information
Contact Security Cloud Control support

Cisco Security Cloud Control: Secure Firewall Device Management

View Events in Security Cloud Control Firewall Management

Updated: August 31, 2026

Guides users through viewing, customizing, and filtering live and historical security events within the analytics and logging interface.

This chapter provides information on how to view live and historical events in Security Cloud Control Firewall Management.

View live events

Configure the Live events page to view the most recent 500 events that match your filter and search criteria.

View historical events

Configure access to view historical events including event details, device status, reporting views, and follow-up actions.

Customize the events view

Configure the events view including event details, device status, reporting views, and follow-up actions.

Show and hide columns on the event logging page

Learn how to show and hide columns on the event logging page.

Change the time zone for the event timestamps

Configure the time zone display for event timestamps on the Event Logging page.

Create and save customizable event filters

Configure custom filters for frequently used filter criteria in Secure Logging Analytics (SaaS).

Event logging page search and filter functionality

Describes how to search and filter events using the event logging page functionality.

Event attributes in security analytics and logging

Describes event attributes in security analytics and logging including event details, device status, reporting views, and follow-up actions.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.