CISCO-IOS router logs

[Azhar Hj.Mohd Ghazali]

Hi team,

Need help with how to massage logs from cisco ios as below example ;

Aug 14 11:30:49.516 MYT: %SSH-5-SSH2_SESSION: SSH2 Session request from x.x.x.x (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded
Aug 14 11:31:18.170 MYT: %SSH-5-SSH2_USERAUTH: User 'hongth' authentication for SSH2 Session from x.x.x.x (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded

Appreciate your help.

[Awwal Ishiaku]

Hi Azhar,
Kindly clarify. Do you want to see alert of these events on the Wazuh dashboard?

[Armelo Jashon]

yes