topic ASA Console and SSH logging in Network Security

ASA Console and SSH logging

mahesh18 — Tue, 12 Mar 2019 01:46:06 GMT

Hi Everyone,

On my ASA i have enabled logging to

Internal Buffer

syslog servers

ASDM only.

However when i have console connection to ASA and i do sh log it shows all the log messages

Same thing happens when i ssh to ASA and do sh log it shows all the log messages.

Logging to destination console and ssh is disabled.

Need to undertstand if console and ssh logging is disabled why i see log messages when i do sh log on console and ssh connection to ASA ?

Regards

Mahesh

ASA Console and SSH logging

kcnajaf — Mon, 20 May 2013 02:47:03 GMT

HI Mahesh,

You have mentioned that you have logging enabled to ASA Internal Buffers. If this is the case what you are seeing is expected behaviour.

If you dont want to see any logs when typing "sh log" the you will have to disable the logging to your internal buffer with the command "no logging buffered".

Hope that help.

Regards

Najaf

Please rate when applicable or helpful !!!

ASA Console and SSH logging

mahesh18 — Mon, 20 May 2013 03:54:07 GMT

Hi Najaf,

I did no logging buffered.

then under ASDM i config the logging for SSH session and it showed this command send to cli

logging monitor debugging

Now i have ssh session to ASA and sh log does not show any log is this also default behaviour?

So when we run the command no logging buffered then is there way that we can see the logs when we have console

and ssh session to ASA?

Regards

Mahesh

ASA Console and SSH logging

kcnajaf — Mon, 20 May 2013 04:17:38 GMT

Hi Mahesh,

If you disable the logging with "no logging buffered" there is no way for you to see the logs with the command "show logs". But when you enable loggin for SSH and you still have "no logging buffered" you should be able to see the logs as and when it happens with the help of "terminal monitor" command.

In short when you have "no logging buffered" enabled the logs are not stored on the buffers and hence you will not be able to see them with "show logs" and you will be able to see them live with the terminal monitor command enabled.

Hope that helps.

Regards

Najaf

Please rate when applicable or helpful !!!

ASA Console and SSH logging

mahesh18 — Mon, 20 May 2013 04:44:54 GMT

Hi Najaf,

Many thanks for answering all my questions.

Regards

Mahesh