topic Re: ASA - Syslog Message List by Event Class? in Network Security

ASA - Syslog Message List by Event Class?

terrygwazdosky — Mon, 11 Mar 2019 18:09:18 GMT

Hey gang:

I'm updating my logging lists and would like to know if there is a list of syslog messages by event class (I found the list by severity level). If not, is there some way to identify the class by looking at the syslog message number?

Thanks.

Re: ASA - Syslog Message List by Event Class?

Nagaraja Thanthry — Fri, 09 Jul 2010 14:59:58 GMT

Hello,

Here is a Cisco document on some of the built in logging classes.

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/l2.html

#wp1749568

Hope this helps.

Regards,

Re: ASA - Syslog Message List by Event Class?

terrygwazdosky — Fri, 09 Jul 2010 15:32:23 GMT

Unfortunately that doesn't really show us, for example, what class messsage ID# 730010 would fall under. That's what I'm after.

Re: ASA - Syslog Message List by Event Class?

Nagaraja Thanthry — Fri, 09 Jul 2010 15:43:28 GMT

Hello,

Unfortunately, there does not seem to be any specific classification of

those individual message types. Typically you configure the message classes

based on your requirement i.e. if you are interested in seeing VPN related

messages, then you use "VPN" class and set appropriate severity. Here is a

document that outlines some additional information about the syslog

messages.

http://www.cisco.com/en/US/docs/security/asa/asa82/system/message/logsevp.ht

Hope this helps.

Regards,

Re: ASA - Syslog Message List by Event Class?

terrygwazdosky — Fri, 09 Jul 2010 18:26:37 GMT

Thanks for the replies.

I understand typical usage, but what if you don't know what class an individual message would fall under? I can make a good guess at most, but I'd rather be certain. This is what I cannot find in the Cisco documentation nor in 3rd party published material.

Another example: I want to receieve emails for threat detection messages (733100 - 733105). Because I'm not sure what class these are in (I'd guess IPS) I have to add them individually to my email logging list. It'd be a heck of a lot easier to add the entire class that they belong to.

Re: ASA - Syslog Message List by Event Class?

Jennifer Halim — Sat, 10 Jul 2010 08:09:50 GMT

Here is the list of syslog messages by event class for your reference:

http://www.cisco.com/en/US/docs/security/asa/asa80/system/message/logmsgs.html#wp4768518

Hope that helps.

Re: ASA - Syslog Message List by Event Class?

saiiven07 — Sat, 10 Jul 2010 10:41:30 GMT

I wish ASAs had some tool to filter syslog messages based on user defined patterns like logging discriminator or ESM in Cisco IOS.

Re: ASA - Syslog Message List by Event Class?

terrygwazdosky — Sat, 10 Jul 2010 11:48:52 GMT

Thanks, halijenn! I totally skipped past that part when I was looking at the messages by severity. d'oh!

Re: ASA - Syslog Message List by Event Class?

CYKmb — Wed, 25 Jan 2023 17:09:07 GMT

Not sure if this link has expired, but that is not a listing of messages by class. That is a listing of messages by ID. The message ID's can be correlated to message Class, according to this table:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/asdm76/general/asdm-76-general-config/monitor-syslog.html#ID-2121-000000c3

Re: ASA - Syslog Message List by Event Class?

mbast — Tue, 16 Sep 2025 12:21:59 GMT

@CYKmb this link is working for me

https://www.cisco.com/c/en/us/td/docs/security/asa/asa914/configuration/general/asa-914-general-config/monitor-syslog.html#ID-2121-000000c3

thank you