When you configure Cisco RV Series VPN Router to send log data to USM Appliance, you can use the Cisco-rv plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin.
|Data Source Name||cisco-rv|
|Data Source ID||1868|
Integrating the Cisco RV Series VPN Router
Before you configure the Cisco RV Series VPN Router integration, you must have the IP Address of the USM Appliance Sensor.
To configure Cisco RV to send log data to
- Log in to the web configuration utility and choose Log > System Log.
- Check the Enable Syslog check box to enable the syslog service on the device.
- Enter the IP address of
USM Appliancein the Syslog server field.
- Click Save to save the configuration.
Note: In the Log Setting section of the web configuration utility, you can also specify those system messages you want to collect and send to
After enabling Syslog, you may want to monitor the volume of messages that you are receiving from any particular device, because storage space can become an issue. You can also determine whether collecting any specific message types contributes significantly to your security monitoring efforts, or is just creating a lot of "noise".
For plugin enablement information, see Enable Plugins.
Additional Resources and Troubleshooting
For troubleshooting, refer to the vendor documentation: