Cisco ASA 5505 Configuration Manual page 1624

Configuring Logging
In the Name field, enter the name of the event list. No spaces are allowed.
Step 3
In the Event Class/Severity area, click Add to display the Add Class and Severity Filter dialog box
Step 4
Choose the event class from the drop-down list. Available event classes change according to the device
Step 5
mode that you are using.
Choose the severity level from the drop-down list. Severity levels include the following:
Step 6
•
•
•
•
•
•
•
•
Click OK to close this dialog box.
Step 7
Note
Step 8 In the Message ID Filters area, click Add to display the Add Syslog Message ID Filter dialog box.
Step 9 In the Message IDs field, enter a syslog message ID or range of IDs (for example, 101001-199012) to
include in the filter.
Step 10 Click OK to close this dialog box.
The event of interest appears in the list. To change this entry, click Edit.
Generating Syslog Messages in EMBLEM Format to a Syslog Server
To generate syslog messages in EMBLEM format to a syslog server, perform the following steps:
Choose Configuration > Device Management > Logging > Syslog Server.
Step 1
To add a new syslog server, click Add to display the Add Syslog Server dialog box. To change an existing
Step 2
syslog server settings, click Edit to display the Edit Syslog Server dialog box.
Specify the number of messages that are allowed to be queued on the adaptive security appliance when
Step 3
a syslog server is busy. A zero value means an unlimited number of messages may be queued.
Check the Allow user traffic to pass when TCP syslog server is down check box to specify whether
Step 4
or not to restrict all traffic if any syslog server is down.
To continue, see the
Step 5
Note
Cisco ASA 5500 Series Configuration Guide using ASDM
71-16
Emergency (level 0, system is unusable)
Alert (level 1, immediate action is needed)
Critical (level 2, critical conditions)
Error (level 3, error conditions)
Warning (level 4, warning conditions)
Notification (level 5, normal but significant conditions)
Informational (level 6, informational messages only)
Debugging (level 7, debugging messages only)
Using a severity level of zero is not recommended.
"Adding or Editing Syslog Server Settings" section on page
You can set up a maximum of four syslog servers per security context (up to a total of 16).
Chapter 71 Configuring Logging
71-17.
OL-20339-01