Check for Historical NSEL Events

This procedure will filter for NSEL events that the Cisco Cloud has received within the time-frame you specify.

Procedure

Step 1

From the CDO menu, choose Analytics > Event Logging.

Step 2

Click the Historical tab.

Step 3

Pin-open the event filter.

Step 4

In the Secure Firewall Cloud Native Events section, make sure NetFlow is checked.

Step 5

Set the Start time far enough back in time to check if CDO ever did receive NSEL events.

Step 6

In the Sensor ID field, enter the IP address of the Secure Firewall Cloud Native you configured to send NSEL events.

Step 7

At the bottom of the filter, make sure that "Include NetFlow Events" is checked.