topic Re:enable syslog debug level 7 and send logs to syslog in Network Security

enable syslog debug level 7 and send logs to syslog

gavin han — Tue, 12 Mar 2019 01:53:58 GMT

Hi,

on cisco ASA, I've to enable syslog debug level 7 and send logs to syslog. how to do that?

enable syslog debug level 7 and send logs to syslog

Julio Carvajal — Thu, 06 Jun 2013 20:25:29 GMT

Hello,

Logging enable

logging host inside x.x.x.x

logging trap 7

logging facility 23

Regards

Re:enable syslog debug level 7 and send logs to syslog

gavin han — Fri, 07 Jun 2013 12:39:15 GMT

Thx. Would I need to add log for each ACL line? Ive ACL of more than 3000 lines so it would tough to write log for each acl line. Any alternative?

Sent from Cisco Technical Support Android App

Re:enable syslog debug level 7 and send logs to syslog

James Leinweber — Fri, 07 Jun 2013 14:33:48 GMT

Unless you have been fiddling with logging levels previously, most ACE's will be using the cisco default logging, and at debug/7 level most of those will generate syslog entries. Don't forget that "show access-list" will show hits counts for the individual entries as well, independently of any syslog output.

Lastly, if a reload is an option, in your situation what I would do if modifying 3k lines was needed is:

1) copy startup-config a.txt

2) export a.txt by TFTP or SSH or USB or whatever

3) edit the configuration using offline tools with regular-expression capabilities such as textpad (windows) or vi or emacs or perl or ...

4) import the revised b.txt config

5) copy b.txt startup-config and reload

-- Jim Leinweber, WI State Lab of Hygiene

Re:enable syslog debug level 7 and send logs to syslog

Julio Carvajal — Fri, 07 Jun 2013 16:30:03 GMT

Hello Gavin,

Well, my question is :

Would you like to log Permits as well... Or just Denies:

I would say just denies right?

If that is the case then by default it's gonna happen,

What is not gonna happen is the Logging for the last implicit deny rule so you will need to add it manually

access-list test deny ip any any log

Then you will get all the logs for traffic being denied across your firewall

Regards,

Julio

Hey Remember to rate all of the helpful posts