topic Re: ASA Sylog quietly fails in Network Security https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211318#M859516 <HTML><HEAD></HEAD><BODY><P>I don't have logging console debugging. I tried changes to the queue size and rate limit previously, but it does not look like a queue or limit problem. It seems that just resetting the logging settings gets it going again.</P></BODY></HTML> Thu, 04 Jun 2009 15:23:09 GMT _airdesk_ 2009-06-04T15:23:09Z ASA Sylog quietly fails https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211316#M859514 <P>I have a network of ASA's set to send syslog to a syslog server. When you first set the ASA to log to syslog it all works, but after a while it stops sending. Then if you reset (turn off logging, turn it back on again) it will start logging until it quietly fails again.</P><P>Any ideas how to get it to stop failing?</P> Tue, 26 Mar 2019 00:42:56 GMT https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211316#M859514 _airdesk_ 2019-03-26T00:42:56Z Re: ASA Sylog quietly fails https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211317#M859515 <HTML><HEAD></HEAD><BODY><P>I had this problem yesterday and figured it out. I had "logging console debugging" enabled which was killing the logging queue. Also, it may benefit you to look at the logging queue size or set the rate limit.</P></BODY></HTML> Thu, 04 Jun 2009 14:57:41 GMT https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211317#M859515 KennethCote 2009-06-04T14:57:41Z Re: ASA Sylog quietly fails https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211318#M859516 <HTML><HEAD></HEAD><BODY><P>I don't have logging console debugging. I tried changes to the queue size and rate limit previously, but it does not look like a queue or limit problem. It seems that just resetting the logging settings gets it going again.</P></BODY></HTML> Thu, 04 Jun 2009 15:23:09 GMT https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211318#M859516 _airdesk_ 2009-06-04T15:23:09Z Re: ASA Sylog quietly fails https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211319#M859517 <HTML><HEAD></HEAD><BODY><P>Just confirmed it again on another ASA. Uncheck "Enable Logging" and recheck it, and syslogs start flowing to the syslog server again instantly.</P></BODY></HTML> Thu, 04 Jun 2009 15:35:39 GMT https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211319#M859517 _airdesk_ 2009-06-04T15:35:39Z Re: ASA Sylog quietly fails https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211320#M859518 <HTML><HEAD></HEAD><BODY><P>BUG CSCsu03602 Resolved in 8.0.4(27).</P><P></P><P>You can read it here: </P><P><A class="jive-link-custom" href="http://tools.cisco.com/Support/BugToolKit/" target="_blank">http://tools.cisco.com/Support/BugToolKit/</A> </P><P>you can go to the above link login with your CCO ID and then key in the</P><P>defect ID above</P><P></P><P></P><P>Defect details does not show it as resolved but, will say so in the near future.</P><P></P><P>Also when it fails to send logs you can see </P><P>1. if console, buffer and monitor will logg</P><P>2. apply capture on the firewall interface facing the syslog server and see if it is sending upd 514 packets to the syslog server during this time.</P><P></P><P></P></BODY></HTML> Thu, 04 Jun 2009 16:15:25 GMT https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211320#M859518 Kureli Sankar 2009-06-04T16:15:25Z Re: ASA Sylog quietly fails https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211321#M859519 <HTML><HEAD></HEAD><BODY><P>OK, thanks, so it is just a bug. I will wait for the fix, thanks for letting me know</P></BODY></HTML> Thu, 04 Jun 2009 16:27:09 GMT https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211321#M859519 _airdesk_ 2009-06-04T16:27:09Z Re: ASA Sylog quietly fails https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211322#M859520 <HTML><HEAD></HEAD><BODY><P>code is already available here:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/cgi-bin/tablebuild.pl/asa-interim" target="_blank">http://www.cisco.com/cgi-bin/tablebuild.pl/asa-interim</A></P><P>asa804-31-k8.bin</P><P></P></BODY></HTML> Thu, 04 Jun 2009 18:11:35 GMT https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211322#M859520 Kureli Sankar 2009-06-04T18:11:35Z ASA Sylog quietly fails https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211323#M859521 <HTML><HEAD></HEAD><BODY><P>we noticed the similar problem in Ver 8.2(2)</P><P></P><P>is there any fix</P></BODY></HTML> Wed, 27 Jul 2011 14:56:06 GMT https://community.cisco.com/t5/network-security/asa-sylog-quietly-fails/m-p/1211323#M859521 ssocsupport 2011-07-27T14:56:06Z