topic Re: Rate Limits on Syslog in Network Security https://community.cisco.com/t5/network-security/rate-limits-on-syslog/m-p/1087280#M893491 <HTML><HEAD></HEAD><BODY><P>A better option would be to turn of logging for unwanted syslog messages e.g.</P><P></P><P>no logging message <NO></NO></P><P></P><P>Or use logging lists/classes:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#as" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#as</A></P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Tue, 18 Nov 2008 07:11:41 GMT Farrukh Haroon 2008-11-18T07:11:41Z Rate Limits on Syslog https://community.cisco.com/t5/network-security/rate-limits-on-syslog/m-p/1087279#M893489 <P>Hi all</P><P></P><P>My syslog is being hammered by a lot of useless junk. is the way to deal with this through rate limits? If so what is a sensible number of messages and interval to set?</P><P></P><P>Thanks</P> Mon, 11 Mar 2019 14:14:08 GMT https://community.cisco.com/t5/network-security/rate-limits-on-syslog/m-p/1087279#M893489 martincheung 2019-03-11T14:14:08Z Re: Rate Limits on Syslog https://community.cisco.com/t5/network-security/rate-limits-on-syslog/m-p/1087280#M893491 <HTML><HEAD></HEAD><BODY><P>A better option would be to turn of logging for unwanted syslog messages e.g.</P><P></P><P>no logging message <NO></NO></P><P></P><P>Or use logging lists/classes:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#as" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#as</A></P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Tue, 18 Nov 2008 07:11:41 GMT https://community.cisco.com/t5/network-security/rate-limits-on-syslog/m-p/1087280#M893491 Farrukh Haroon 2008-11-18T07:11:41Z Re: Rate Limits on Syslog https://community.cisco.com/t5/network-security/rate-limits-on-syslog/m-p/1087281#M893493 <HTML><HEAD></HEAD><BODY><P>I'd like to log unsuccessful attempts but only once.</P><P></P><P>So for example I only want one entry for someone trying to ping me rather than every single packet.</P><P></P><P>Turning off a specific message seems to be global which I'd rather not do if I can avoid it.</P><P></P><P>Any ideas?</P></BODY></HTML> Tue, 18 Nov 2008 12:05:19 GMT https://community.cisco.com/t5/network-security/rate-limits-on-syslog/m-p/1087281#M893493 martincheung 2008-11-18T12:05:19Z Re: Rate Limits on Syslog https://community.cisco.com/t5/network-security/rate-limits-on-syslog/m-p/1087282#M893495 <HTML><HEAD></HEAD><BODY><P>I don't think you can do this on the ASA. You could perhaps send this information to a specialized syslog analyzer (like MARS,manage engine, Sawmill) and then run custom queries/reports.</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Tue, 18 Nov 2008 14:06:31 GMT https://community.cisco.com/t5/network-security/rate-limits-on-syslog/m-p/1087282#M893495 Farrukh Haroon 2008-11-18T14:06:31Z