Cisco Cisco Firepower Management Center 4000

Admin

Select 

.

The first (and only) page of the default audit log workflow appears. To use a different workflow, 
including a custom workflow, click 

. For information on specifying a different default 

workflow, see 

. If no events appear, you may need to adjust 

the time range. For more information, see 

.

If you are using a custom workflow that does not include the table view of audit events, click 

, then select 

.

Any

constraining on a specific value

Click a value within a row. 

If you click a value on a drill-down page, you move to the next page and constrain on 
the value.

Note that clicking a value within a row in a table view constrains the table view and 
does not drill down to the next page. 

Table views always include “Table View“ in the page name.

For more information, see 

.

delete audit records

use one of the following methods:

To delete some items, select the check boxes next to events you want to delete, 
then click 

.

To delete all items in the current constrained view, click 

, then confirm 

you want to delete all the events.

temporarily use a different workflow click 

. For more information, see 

.

bookmark the current page so you 
can quickly return to it

click 

. For more information, see 

navigate to the bookmark 
management page

click 

. For more information, see 

.

generate a report based on the data in 
the current view

click 

. For more information, see 

.

view a summary of a change 
recorded in the audit log

click the compare icon (

) next to applicable events in the 

 column. For more 

information, see 

.