topic How to see write log in Network Security

How to see write log

shahid_duet — Mon, 11 Mar 2019 21:08:31 GMT

Dear boss

I want to see log for write on ASA5520. who & when write lastly and who write before.

How to see this log. In show vershon i see last modified date, but not log.

Thaning You

shahid

How to see write log

Collin Clark — Sat, 06 Aug 2011 11:58:22 GMT

You'll need to setup a AAA server and check it's logs. AFAIK the ASA cannot do it directly.

How to see write log

shahid_duet — Sat, 06 Aug 2011 12:39:01 GMT

hi clark

In show version wee see when last modified but not saved/write.

How to see last saved/write date?

My AAA server is enable but dont see log.

Please tell me details how to enable or check.

thanks.

How to see write log

Collin Clark — Sat, 06 Aug 2011 13:14:36 GMT

In your AAA server filter on the ASA and do a search for 'write' or 'copy' and that should bring up the results you are looking for.

How to see write log

varrao — Sat, 06 Aug 2011 13:32:52 GMT

Hi Shahid,

You can use this log to identify who did a write mem on the device, the syslog id is 111001.

For this the level of logging should be debug.

Error Message    %ASA-5-111001: Begin configuration: IP_address writing to device

Explanation This message is displayed when you enter the write command to store your configuration on a device (either floppy, flash memory, TFTP, the failover standby unit, or the console terminal). The IP_address indicates whether the login was made at the console port or with a Telnet connection.

I hope this is what you were looking for.

Hope this helps.

Thanks,

Varun

How to see write log

varrao — Thu, 11 Aug 2011 16:09:38 GMT

Any luck on this??

-Varun