SYSLOG MSG?

abhi-adte — Mon, 11 Mar 2019 22:21:25 GMT

Hi,

I want to do some changes for syslog message:

As per below message like message ID 302014 or some more are examples, are sending log to my log server and server utilization is very high. So I want to do like these message alert on syslog server is not necessary for me... but its still sending so I need a help to block the particular message id don't need to send on server.

How I can do this?

Aug 24 2007 11:15:33: %ASA-6-302013: Built inbound TCP connection 733283 for outside:192.168.208.63/51608 (192.168.208.63/51608) to inside:192.168.150.63/80 (192.168.150.63/80)

Aug 24 2007 11:15:33: %ASA-6-302014: Teardown TCP connection 733283 for outside:192.168.208.63/51608 to inside:192.168.150.63/80 duration 0:00:00 bytes 0

Aug 24 2007 10:27:22: %ASA-6-302015: Built inbound UDP connection 732748 for outside:192.168.208.63/49804 (192.168.208.63/49804) to inside:192.168.150.70/53 (192.168.150.70/53)

Aug 24 2007 10:27:22: %ASA-6-302015: Built inbound UDP connection 732749 for outside:192.168.208.63/49804 (192.168.208.63/49804) to inside:192.168.150.70/123 (192.168.150.70/123)

Aug 24 2007 10:27:22: %ASA-6-302015: Built inbound UDP connection 732750 for outside:192.168.208.63/49804 (192.168.208.63/49804) to inside:192.168.150.70/

ug 24 2007 10:27:22: %ASA-6-302020: Built ICMP connection for faddr 192.168.208.63/15343 gaddr 192.168.150.70/0 laddr 192.168.150.70/0

Aug 24 2007 10:27:22: %ASA-6-302021: Teardown ICMP connection for faddr 192.168.208.63/0 gaddr 192.168.150.70/0 laddr 192.168.150.70/0

Thanks in advance....

SYSLOG MSG?

mvsheik123 — Tue, 31 Jan 2012 18:17:30 GMT

Try 'no logging message ' on ASA.

hth

Re: SYSLOG MSG?

Marvin Rhoads — Tue, 31 Jan 2012 18:31:08 GMT

As MS noted, you can disable individual log messages by their ID number.

Another approach is to raise the logging message level globally using the command:

logging trap {severity_level | message_list}

The messages you cite are all Level 6 (Informational). If you change the level to 5 (Notification), only messages of that severity or greater ( = lower numerical value) will be logged. Here is a listing of messages by severity.

See here for details on configuring logging options.

topic SYSLOG MSG? in Network Security

SYSLOG MSG?

SYSLOG MSG?

Re: SYSLOG MSG?