Cisco ASA 5505 Configuration Manual page 1609

Configuring Logging
This chapter describes how to configure and manage logs for the adaptive security appliance and
includes the following sections:
•
•
•
•
•
•
•
Information About Logging
System logging is a method of collecting messages from devices to a server running a syslog daemon.
Logging to a central syslog server helps in aggregation of logs and alerts. Cisco devices can send their
log messages to a UNIX-style syslog service. A syslog service accepts messages and stores them in files,
or prints them according to a simple configuration file. This form of logging is the best available for
Cisco devices, because it can provide protected long-term storage for logs. Logs are useful both in
routine troubleshooting and in incident handling.
The adaptive security appliance system logs provide you with information for monitoring and
troubleshooting the adaptive security appliance. With the logging feature, you can do the following:
•
•
•
•
•
•
•
OL-20339-01
Information About Logging, page 71-1
Licensing Requirements for Logging, page 71-5
Prerequisites for Logging, page 71-5
Guidelines and Limitations, page 71-6
Configuring Logging, page 71-6
Log Monitoring, page 71-22
Feature History for Logging, page 71-25
Specify which syslog messages should be logged.
Disable or change the severity level of a syslog message.
Specify one or more locations where syslog messages should be sent, including an internal buffer,
one or more syslog servers, ASDM, an SNMP management station, specified e-mail addresses, or
to Telnet and SSH sessions.
Configure and manage syslog messages in groups, such as by severity level or class of message.
Specify whether or not a rate-limit is applied to syslog generation.
Specify what happens to the contents of the internal log buffer when it becomes full: overwrite the
buffer, send the buffer contents to an FTP server, or save the contents to internal flash memory.
Filter syslog messages by locations, severity level, class, or a custom message list.
C H A P T E R
Cisco ASA 5500 Series Configuration Guide using ASDM
71
71-1