Syslog for Authentication
Has anyone be able to setup a syslog for cisco devices that captures fail login attempts?
Forum Discussion
Ah, if you can change the severity, that should work. So, the filters in EventSources are opt in. Meaning that only messages that match the filters will generate alerts. Since none of your messages contain "Login denied" they are getting filtered out. Maybe i'm not seeing everything that's not in your screenshot.