Problem with logging queue on Cisco ASA

enterprisesoc — Fri, 21 Feb 2020 13:29:37 GMT

Hi all,

As in title, I configured the logging queue so the ASA can store logs until the syslog server is unavailable but if I turn down the syslog server, giving the cli command "show logging queue" I see:

        Logging Queue length limit : 8192 msg(s)
        0 msg(s) discarded due to queue overflow
        0 msg(s) discarded due to memory allocation failure
        Current 0 msg on queue, 21 msgs most on queue

The ASA doesn't store logs in the queue and when I restore the connection with the syslog server it doesn't receive any log for time it was down.

I'm sure that the server was not connected because from the "show log" command I saw:

"Logging to inside x.x.x.x tcp/1470 Not connected since Mon, xx May 2015 09:33:53 UTC"

The logging configuration is:

logging enable
logging timestamp
logging list Logging_Test message 611103
logging list Logging_Test message 605005
logging list Logging_Test message 611102
logging list Logging_Test message 611101
logging list Logging_Test message 302013
logging buffer-size 16384
logging monitor informational
logging buffered Logging_Test
logging trap Logging_Test
logging history Logging_Test
logging asdm informational
logging queue 0
logging device-id ipaddress inside system
logging host inside x.x.x.x 6/1470
logging permit-hostdown

logging rate-limit unlimited message 302013

Any idea of why logging queue doesn't work?

Thanks

Regards

topic Problem with logging queue on Cisco ASA in Network Security

Problem with logging queue on Cisco ASA