topic syslog "logging device-id" in FTD 6.2.3 in Network Security

syslog "logging device-id" in FTD 6.2.3

NeerajS — Fri, 21 Feb 2020 16:30:12 GMT

Hello, We have an ASA running FTD 6.2.3 managed via FDM web UI. Upon configuing syslogging in FDM, we noticed that syslog messages in our syslog server do not have the hostname of the ASA in them. So the Syslog server either shows hostname as "ip-address of interface" or the Month from the timestamp of the messages.

I remember in old ASA we had an option of "logging device-id". How do i enable "logging device-id" either via firepower cli or FDM ? Currently there is no such option in FDM web UI.

Thanks

Neeraj

Re: syslog "logging device-id" in FTD 6.2.3

Marvin Rhoads — Mon, 26 Nov 2018 11:55:15 GMT

You can try adding it via FlexConfig. I don't have my lab handy right now but it's not a blacklisted command. So it's worth a try to add:

logging device-id hostname

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/fdm/fptd-fdm-config-guide-623/fptd-fdm-advanced.html

Re: syslog "logging device-id" in FTD 6.2.3

NeerajS — Mon, 26 Nov 2018 14:43:12 GMT

Hi Marvin, Thanks as always. Unfortunately "logging" is in that list of black listed commands. Let me check with cisco TAC on this.

Re: syslog "logging device-id" in FTD 6.2.3

Abheesh Kumar — Mon, 26 Nov 2018 19:22:15 GMT

Hi Neeraj,
Did you get any solution from TAC.

Re: syslog "logging device-id" in FTD 6.2.3

NeerajS — Mon, 26 Nov 2018 20:44:50 GMT

Not yet, i will keep you posted.

Re: syslog "logging device-id" in FTD 6.2.3

NeerajS — Tue, 27 Nov 2018 14:32:43 GMT

As per cisco TAC, this is not supported via FDM. However, FMC has that option available in the GUI itself.

Re: syslog "logging device-id" in FTD 6.2.3

Abheesh Kumar — Tue, 27 Nov 2018 15:29:35 GMT

In platform policy option is there to send syslog device id.

HTH

Abheesh