Filtering System Log Messages - Cisco FirePOWER ASA 5500 series Configuration Manual

Configuring and Managing Logs
To specify that messages in the log buffer should be saved to an FTP server each time the buffer wraps,
perform the following steps.
To enable the security appliance to send the log buffer contents to an FTP server every time the buffer
Step 1
wraps, enter the following command:
hostname(config)# logging ftp-bufferwrap
Step 2 To identify the FTP server, entering the following command:
hostname(config)# logging ftp-server server path username password
Where the server argument specifies the IP address of the external FTP server
The path argument specifies the directory path on the FTP server where the log buffer data is to be saved.
This path is relative to the FTP root directory.
The username argument specifies a username that is valid for logging into the FTP server.
The password argument specifies the password for the username specified.
For example:
hostname(config)# logging ftp-server 10.1.1.1 /syslogs logsupervisor 1luvMy10gs
Saving the Current Contents of the Log Buffer to Internal Flash Memory
At any time, you can save the contents of the buffer to internal Flash memory. To save the current
contents of the log buffer to internal Flash memory, enter the following command:
hostname(config)# logging savelog [savefile]
For example, the following example saves the contents of the log buffer to internal Flash memory using
the file name latest-logfile.txt:
hostname(config)# logging savelog latest-logfile.txt
Clearing the Contents of the Log Buffer
To erase the contents of the log buffer, enter the following command:
hostname(config)# clear logging buffer

Filtering System Log Messages

This section describes how to specify which system log messages should go to output destinations, and
includes the following topics:
•
•
•
Cisco Security Appliance Command Line Configuration Guide
42-14
Message Filtering Overview, page 42-15
Filtering System Log Messages by Class, page 42-15
Filtering System Log Messages with Custom Message Lists, page 42-17
Chapter 42 Monitoring the Security Appliance
OL-10088-01