Configuring Log Output Destinations; Sending Syslog Messages To A Syslog Server - Cisco 7604 Configuration Manual

Configuring and Managing Syslog Messages
The following example show the syslog message that would be generated when the logging names
command is used:
%FWSM-6-302013: Built outbound TCP connection 144547141745774540 for inside:client/42934
(client/42934) to outside:server/11223 (server/80)
The following example show the syslog message that would be generated when the no logging names
command is used:
%FWSM-6-302013: Built outbound TCP connection 144547141745774540 for
inside:172.149.1.1/42934 (172.149.1.1/42934) to outside:172.109.1.1/11223 (172.109.1.1/80)

Configuring Log Output Destinations

This section describes how to specify where the FWSM should save or send the log messages it
generates. To view syslog messages generated by the FWSM, you must specify a log output destination.
If you enable logging without specifying a log output destination, the FWSM generates messages but
does not save them to a location from which you can view them.
This section includes the following topics:
•
•
•
•
•

Sending Syslog Messages to a Syslog Server

This section describes how to configure the FWSM to send syslog messages to a syslog server.
Configuring the FWSM to send syslog messages to a syslog server enables you to archive syslog
messages, limited only by the available disk space on the server, and it enables you to manipulate log
data after it is saved. For example, you could specify actions to be executed when certain types of syslog
messages are logged, extract data from the log and save the records to another file for reporting, or track
statistics using a site-specific script.
The syslog server must run a program (known as a server) called syslogd. UNIX provides a syslog server
as part of its operating system. For Windows 95 and Windows 98, obtain a syslogd server from another
vendor.
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
25-4
Deny Conn when Queue Full: disabled
Console logging: disabled
Monitor logging: disabled
Buffer logging: disabled
Trap logging: disabled
History logging: disabled
Device ID: disabled
Mail logging: disabled
ASDM logging: disabled
Sending Syslog Messages to a Syslog Server, page 25-4
Sending Syslog Messages to an E-mail Address, page 25-6
Sending Syslog Messages to ASDM, page 25-7
Sending Syslog Messages to a Switch Session, Telnet Session, or SSH Session, page 25-8
Sending Syslog Messages to the Log Buffer, page 25-9
Chapter 25 Monitoring the Firewall Services Module
OL-20748-01