topic logging device-id ipaddress in Network Security

logging device-id ipaddress

mahesh18 — Tue, 12 Mar 2019 03:42:57 GMT

Hi everyone,

If we config ASA with command below

logging host inside 192.168.1.50

Above command will send all log messages to server 192.168.1.50 right?

If we also config command below

logging device-id ipaddress inside

What does above command do?

will it make any difference to logging to server?

Regards

MAhesh

logging device-id ipaddress

Marius Gunnerud — Sat, 08 Feb 2014 18:29:04 GMT

Hi Mahesh,

The device-ide keyword is used to include a device ID in a non-EMBLEM format syslog message. EMBLEM is a format that is primarily used with CiscoWorks and is only available for UDP syslog servers.

logging device-id ipaddress inside

This command will send syslog messages to the configured syslog server with the IP address of the inside interface as the device ID. This will not affect to the syslog server you are sending logs to, just what device ID it sends. Keep in mind that this device id will override any interface IP you are sourcing the syslog message from.

So lets say you configure logging host DMZ 192.168.1.50 and then you configure logging device-id ipaddress inside All syslog messages will be sent to 192.168.1.50 but will show up with an ID (or source ID) of the inside interface IP.

You can also configure the device id to be the hostname of the ASA, a context name, or a custom string that you define yourself.

--
Please remember to rate and select a correct answer

logging device-id ipaddress

mahesh18 — Tue, 11 Feb 2014 03:45:50 GMT

Thanks Marius

Mahesh

logging device-id

farazchakkungal — Wed, 03 Apr 2019 06:35:23 GMT

Can we configure different device-id for different syslog server on the same ASA?