Get log from device cisco switch

[Calvin Nguyen]

i'm newbie. Please help me how to get log from cisco device 

thank u

[Abdullah Al Rafi Fahim]

Hello,

Thank you for using Wazuh!

You can configure your Cisco endpoints to send events using syslog to Wazuh following this documentation: https://wazuh.com/blog/how-to-configure-rsyslog-client-to-send-events-to-wazuh/ 

Wazuh has some pre-built decoders/rules for Cisco logs that might decode the logs from your Cisco switch and trigger alerts:
https://github.com/wazuh/wazuh-ruleset/blob/master/rules/0075-cisco-ios_rules.xml
https://github.com/wazuh/wazuh-ruleset/blob/master/rules/0425-cisco-estreamer_rules.xml
https://github.com/wazuh/wazuh-ruleset/blob/master/rules/0625-cisco-asa_rules.xml

If no pre-built decoder/rule does not match your cisco logs, you can create your custom ones following this: https://wazuh.com/blog/creating-decoders-and-rules-from-scratch/

I hope it helps. Please let us know if you need anything else.