topic Re: ASA 5510 ASDM show log on access-list empty in Network Security

ASA 5510 ASDM show log on access-list empty

Ivan Tesselaar — Tue, 12 Mar 2019 01:14:41 GMT

I created some acess-lists, and you can assign a logging level to this access-list. Now this ACL has a lot of hits, so i want to see whats happening. Only the log I then see is completely empty. I cannot figure out how to get some info in that log.

I think there is some global logging setting i probably need to enable in order to get anything logged at all, but i cannot figure out which.

ASA 5510 ASDM show log on access-list empty

Jouni Forss — Fri, 15 Mar 2013 11:49:32 GMT

Hi,

I think it will probably need the ASDM logging level set to informational. Though if you have already checked logs through ASDM it should probably already be there?

Check if you have

logging asdm informational

In your configurations

- Jouni

ASA 5510 ASDM show log on access-list empty

Ivan Tesselaar — Fri, 15 Mar 2013 11:56:48 GMT

I have: logging asdm alerts

Probably to low?

Re: ASA 5510 ASDM show log on access-list empty

Jouni Forss — Fri, 15 Mar 2013 12:03:41 GMT

Hi,

Alerts is Severity 1

Informational is Severity 6

I imagine if you changed the ACL rules level to Alerts it would start to show on the ASDM log.

Other option is to change the "logging asdm informational"

Or perhaps changing the ACL rule to "notifactions" and configuring "logging asdm notifications" if you generally want to see a low amount of logs on the ASDM. I have not had much need to change the ASDM logging level from the Informational / Debugging level.

- Jouni

ASA 5510 ASDM show log on access-list empty

Ivan Tesselaar — Fri, 15 Mar 2013 12:09:40 GMT

I want to see if the ACL is hit, and what hits it. The minimum for this is informational.

But I sont really like to raise the "general" level much higher, because the logging on the Home view is very busy then. But this configuration made it work. I sont really understand why cisco made it this way. This is also a big strain on the processor.

Thanks for your help!