Enabling Debug Logging - Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Installation Manual

Chapter A Troubleshooting

Enabling Debug Logging

Enabling debug logging seriously affects performance and should only be done when instructed by TAC.
Caution
To enable debug logging, follow these steps:
Log in to the service account.
Step 1
Edit the log.conf file to increase the size of the log to accommodate the additional log statements.
Step 2
vi /usr/cids/idsRoot/etc/log.conf
Step 3 Change
Step 4 Locate the zone and CID section of the file and set the severity to debug.
severity=debug
Save the file, exit the vi editor, and exit the service account.
Step 5
Log in to the CLI as administrator.
Step 6
Enter master control submode.
Step 7
sensor# configure terminal
sensor(config)# service logger
sensor(config-log)# master-control
To enable debug logging for all zones.
Step 8
sensor(config-log-mas)# enable-debug true
sensor(config-log-mas)# show settings
master-control
-----------------------------------------------
-----------------------------------------------
sensor(config-log-mas)#
To turn on individual zone control.
Step 9
sensor(config-log-mas)# individual-zone-control true
sensor(config-log-mas)# show settings
master-control
-----------------------------------------------
-----------------------------------------------
sensor(config-log-mas)#
Exit master zone control.
Step 10
sensor(config-log-mas)# exit
Step 11 View the zone names.
sensor(config-log)# show settings
master-control
-----------------------------------------------
-----------------------------------------------
zone-control (min: 0, max: 999999999, current: 14)
OL-18504-01
to
fileMaxSizeInK=500 fileMaxSizeInK=5000
enable-debug: true default: false
individual-zone-control: false <defaulted>
enable-debug: true default: false
individual-zone-control: true default: false
enable-debug: false <defaulted>
individual-zone-control: true default: false
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0
Troubleshooting the Appliance
.
A-47