Cisco ASA 5505 Configuration Manual page 1631

Chapter 71 Configuring Logging
Monitoring > Logging > Real-Time Log Viewer > View
•
Monitoring > Logging > Log Buffer > View
•
In either the Real-Time Log Viewer or the Log Buffer Viewer dialog box, click Build Filter in the
Step 2
toolbar.
In the Build Filter dialog box, specify the filtering criteria to apply to syslog messages:
Step 3
In the Date and Time area, choose one of the following three options: real-time, a specific time, or
a.
a time range. If you chose a specific time, indicate the time by entering the number and choosing
hours or minutes from the drop-down list. If you chose a time range, in the Start Time field, click
the drop-down arrow to display a calendar. Choose a start date and a start time from the drop-down
list, then click OK. In the End Time field, click the drop-down arrow to display a calendar. Choose
an end date and an end time from the drop-down list, then click OK.
Enter a valid severity level in the Severity field. Alternatively, click the Edit icon on the right of the
b.
Severity field. In the Severity dialog box, click the severity levels in the list on which you want to
filter. To include severity levels 1-7, click All. Click OK to display these settings in the Build Filter
dialog box. For additional information about the correct input format to use, click the Info icon on
the right of the Severity field.
Enter a valid syslog ID in the Syslog ID field. Alternatively, click the Edit icon on the right of the
c.
Syslog ID field. In the Syslog ID dialog box, choose a condition on which to filter from the
drop-down list, then click Add. Click OK to display these settings in the Build Filter dialog box.
Click Delete to remove these settings and enter new ones. For additional information about the
correct input format to use, click the Info icon on the right of the Syslog ID field.
d. Enter a valid source IP address in the Source IP Address field, or click the Edit icon on the right of
the Source IP Address field. In the Source IP Address dialog box, choose a single IP address or a
specified range of IP addresses, then click Add. To exclude a specific IP address or range of IP
addresses, check the Do not include (exclude) this address or range check box. Click OK to
display these settings in the Build Filter dialog box. Click Delete to remove these settings and enter
new ones. For additional information about the correct input format to use, click the Info icon on
the right of the Source IP Address field.
e. Enter a valid source port in the Source Port field, or click the Edit icon on the right of the Source
Port field. In the Source Port dialog box, choose a condition on which to filter from the drop-down
list, then click Add. Click OK to display these settings in the Build Filter dialog box. Click Delete
to remove these settings and enter new ones. For additional information about the correct input
format to use, click the Info icon on the right of the Source Port field.
Enter a valid destination IP address in the Destination IP Address field, or click the Edit icon on the
f.
right of the Destination IP Address field. In the Destination IP Address dialog box, choose a single
IP address or a specified range of IP addresses, then click Add. To exclude a specific IP address or
range of IP addresses, check the Do not include (exclude) this address or range check box. Click
OK to display these settings in the Build Filter dialog box. Click Delete to remove these settings
and enter new ones. For additional information about the correct input format to use, click the Info
icon on the right of the Destination IP Address field.
Enter a valid destination port in the Destination Port field, or click the Edit icon on the right of the
g.
Destination Port field. In the Destination Port dialog box, choose a condition on which to filter from
the drop-down list, then click Add. Click OK to display these settings in the Build Filter dialog box.
Click Delete to remove these settings and enter new ones. For additional information about the
correct input format to use, click the Info icon on the right of the Destination Port field.
Enter filtering text for the Description field. The text may be any string of one or more characters,
h.
including a regular expression. However, semicolons are not valid characters, and this setting is
case-sensitive. Multiple entries must be separated by commas.
OL-20339-01
Cisco ASA 5500 Series Configuration Guide using ASDM
Log Monitoring
71-23