Cisco ASA Series Cli Configuration Manual page 1980

Configuring Logging
Generating Syslog Messages in EMBLEM Format to a Syslog Server
To generate syslog messages in EMBLEM format to a syslog server, enter the following command:
Command
logging host interface_name ip_address
{tcp[/port] | udp[/port]] [format emblem]
Example:
hostname(config)# logging host interface_1 127.0.0.1
udp format emblem
Generating Syslog Messages in EMBLEM Format to Other Output Destinations
To generate syslog messages in EMBLEM format to other output destinations, enter the following
command:
Command
logging emblem
Example:
hostname(config)# logging emblem
Cisco ASA Series CLI Configuration Guide
1-14
Purpose
Sends syslog messages in EMBLEM format to a syslog server
over UDP using port 514.
The format emblem keyword enables EMBLEM format
logging for the syslog server (UDP only). The interface_name
argument specifies the interface through which you access the
syslog server. The ip_address argument specifies the IP
address of the syslog server. The tcp[/port] or udp[/port]
keyword and argument pair specify that the ASA and ASASM
should use TCP or UDP to send syslog messages to the syslog
server.
You can configure the ASA and ASASM to send data to a
syslog server using either UDP or TCP, but not both. The
default protocol is UDP if you do not specify a protocol.
You can use multiple logging host commands to specify
additional servers that would all receive syslog messages. If
you configure two or more logging servers, make sure that you
limit the logging severity level to warnings for all logging
servers.
If you specify TCP, the ASA or ASASM discovers when the
syslog server fails and as a security protection, new
connections through the ASA are blocked. If you specify UDP,
the ASA or ASASM continues to allow new connections
whether or not the syslog server is operational. Valid port
values for either protocol are 1025 through 65535. The default
UDP port is 514. The default TCP port is 1470.
Note
Sending syslogs over TCP is not supported on a
standby ASA.
Purpose
Sends syslog messages in EMBLEM format to output
destinations other than a syslog server, such as Telnet or SSH
sessions.
Chapter 1 Configuring Logging