topic Re: facility code in syslogs in Network Security

facility code in syslogs

Wajih1 — Wed, 13 Apr 2022 13:53:56 GMT

Hi Guys,

Any one faced this requirement before? i have many syslog server configured in my cisco ASA? ONE syslog server require facility code 0 and not facility code 7 to be include in syslogs.

What's the difference between them and what is the impact when changing the facility code to 0 in syslog Format ? thanks in advance

Regards,

Re: facility code in syslogs

Wajih1 — Wed, 13 Apr 2022 14:18:37 GMT

Sorry, i'm talking about local0 and local7

Re: facility code in syslogs

balaji.bandi — Wed, 13 Apr 2022 14:38:29 GMT

here is the log facility :

ASA1(config)# logging monitor ?

configure mode commands/options:
  <0-7>          Enter syslog level (0 - 7)
  WORD           Specify the name of logging list
  alerts         Immediate action needed           (severity=1)
  critical       Critical conditions               (severity=2)
  debugging      Debugging messages                (severity=7)
  emergencies    System is unusable                (severity=0)
  errors         Error conditions                  (severity=3)
  informational  Informational messages            (severity=6)
  notifications  Normal but significant conditions (severity=5)
  warnings       Warning conditions                (severity=4)

If you looking to send specific logs :

https://www.cisco.com/c/en/us/td/docs/security/asa/syslog/b_syslog.html