topic Please provide the relevant in Network Security

Cisco ASA syslog message for User password change event

shalendra2 — Tue, 12 Mar 2019 07:31:12 GMT

Hi All,

What is the syslog message id for User password change event for Cisco ASA Firewall.

Please suggest us.

Regards,

Shalendra

Hi,

Aditya Ganjoo — Mon, 21 Mar 2016 08:08:50 GMT

Hi,

You can use the following syslog for this:

111010

Error Message %ASA-5-111010: User username, running application-name from IP ip addr, executed cmd
Explanation A user made a configuration change.
username —The user making the configuration change
application-name —The application that the user is running
ip addr —The IP address of the management station
cmd —The command that the user has executed

Regards,

Aditya

Please rate helpful posts and mark correct answers.

Please provide the relevant

shalendra2 — Mon, 21 Mar 2016 08:35:39 GMT

Please provide the relevant real time log description.

Regards,

Shalendra

Hi Shalendra,

Aditya Ganjoo — Mon, 21 Mar 2016 08:38:03 GMT

Hi Shalendra,

If you make any changes with respect to the password you would see this syslog on the ASA.

You can even test it on the ASA by checking on the logging console,ASDM or a syslog server.

Regards,

Aditya