Log360 recently installed.
Cisco ASA syslog shows being collected and is searchable.
However, Ubuntu server running rsyslog isn't working the same way. Syslog messages show in Device Management [Last 10 Events] as being collected, but in the search tab, no results can be pulled up. Advanced search selecting the syslog server only and searching for the severity or type reported in [Last 10 Events] still returns no results.
Any suggestions?