Cisco syslog incidents are not creating in SSIM
Recently we implemented KIWI Syslog server with SSIM .
Syslog server contains logs of all routers and switchs. We are able to see the events in ssim with severity id "1 Information".
But incidents are not creating for that syslogs.
Pl suggerst which rules are refers to create incidents in ssim for CISCO Router logs.