View historical events

View historical events to access events older than the most recent 500 that have been transferred from the Live events page to the Historical events table.

The Live events page shows the most recent 500 events that match the filter and search criteria you entered. Events older than the most recent 500 are transferred to the Historical events table. That transfer takes roughly a minute to perform. You can then filter all the events you have stored to find events you're looking for.

Procedure

Step 1	From the Security Cloud Control Home page, click Firewall.
Step 2	In the navigation pane, choose Events & Logs > Events > Event Logging.
Step 3	Click the Historical tab. By default, when you open the Historical events table, the filter is set to display the events collected within the last hour. The event attributes are largely the same as what is reported by Firepower Device Manager (FDM) or the Adaptive Security Device Manager (ASDM). For a complete description of Firepower Threat Defense event attributes, see Cisco FTD Syslog Messages. For a complete description of ASA event attributes, see Cisco ASA Series Syslog Messages.

The Historical events table displays filtered events, allowing you to review and analyze historical event data based on your specified criteria.