Cisco ASA 5505 Configuration Manual page 1613

Chapter 71 Configuring Logging
time, click the headers of the other column(s) that you want to include in the sort order. To sort messages
chronologically, select both the date and time columns; otherwise, the messages will be sorted only by
date (regardless of the time) or only by time (regardless of the date).
When you sort messages in the Real-Time Log Viewer Viewer and in the Latest ASDM Syslog Events
Viewer, the new messages that come in appear in the sorted order, instead of at the top, as they normally
would be. That is, they are mixed in with the rest of the messages.
Using Custom Message Lists
Creating a custom message list is a flexible way to exercise control over which syslog messages are sent
to which output destination. In a custom syslog message list, you specify groups of syslog messages
using any or all of the following criteria: severity level, message IDs, ranges of syslog message IDs, or
message class.
For example, you can use message lists to do the following:
•
•
A message list can include multiple criteria for selecting messages. However, you must add each
message selection criterion with a new command entry. It is possible to create a message list that
includes overlapping message selection criteria. If two criteria in a message list select the same message,
the message is logged only once.
Licensing Requirements for Logging
The following table shows the licensing requirements for this feature:
Model License Requirement
All models Base License.
Prerequisites for Logging
Logging has the following prerequisites:
•
•
OL-20339-01
Select syslog messages with severity levels of 1 and 2 and send them to one or more e-mail
addresses.
Select all syslog messages associated with a message class (such as ha) and save them to the internal
buffer.
The syslog server must run a server program called syslogd. Windows (except for Windows 95 and
Windows 98) provides a syslog server as part of its operating system. For Windows 95 and Windows
98, you must obtain a syslogd server from another vendor.
To view logs generated by the adaptive security appliance, you must specify a logging output
destination. If you enable logging without specifying a logging output destination, the adaptive
security appliance generates messages but does not save them to a location from which you can view
them. You must specify each different logging output destination separately. For example, to
designate more than one syslog server as an output destination, specify separate entries in the Syslog
Server pane for each syslog server.
Licensing Requirements for Logging
Cisco ASA 5500 Series Configuration Guide using ASDM
71-5