Cisco syslog incidents are not creating in SSIM

HI,

Recently we implemented KIWI Syslog server with SSIM .

Syslog server contains logs of all routers and switchs. We are able to see the events in ssim with severity id "1 Information".

But incidents are not creating for that syslogs.

Pl suggerst which rules are refers to create incidents in ssim for CISCO Router logs.

Thanks.