topic Re: Why ASA log view is empty in Network Security

Why ASA log view is empty

franklaszlo — Sat, 12 Oct 2019 17:09:33 GMT

I am not very experienced with ASA and always wondered why I can't see any log event in log viewer when I click the show log in ASDM on an access rule having debug level logging enabled, tons of hits and log interval is also set for 10 seconds. What am I missing here ?

ASD logging level is also set to debugging:

Re: Why ASA log view is empty

Rob Ingram — Sat, 12 Oct 2019 19:32:41 GMT

Hi,
Is logging actually enabled? The command from the CLI to to confirm it's enabled by running "show logging" and the command to enable is "logging enable"

HTH

Re: Why ASA log view is empty

franklaszlo — Sun, 13 Oct 2019 11:14:47 GMT

Hello,

thanks for picking this up, yes it is enabled:

Further to that, this is the rule in question :

I can't comprehend why the log viewer is not showing anything, but it already drives me crazy...

Re: Why ASA log view is empty

Marvin Rhoads — Sun, 13 Oct 2019 12:19:21 GMT

Your ASDM logging is set to "warning" (level 4).

When you have the log keyword on an ACL entry (as you show in your example) the default level assigned is "informational" (level 6).

https://www.cisco.com/c/en/us/td/docs/security/asa/asa913/configuration/firewall/asa-913-firewall-config/access-acls.html#ID-2069-00000206

Re: Why ASA log view is empty

franklaszlo — Sun, 13 Oct 2019 14:39:46 GMT

Thank you @Marvin Rhoads , you're totally correct, however, the time I was checking the log viewer it was set to Debugging, I only set it back to Warning to spare resources to the small guy.

So the logging setting screenshot is deceiving, sorry for that.