topic Re: ASA access list's logging in Network Security https://community.cisco.com/t5/network-security/asa-access-list-s-logging/m-p/1042386#M896013 <HTML><HEAD></HEAD><BODY><P>Why do you need "logging trap 7"? I thought</P><P>"logging trap 6" will send ACL log to the syslog</P><P>server. </P><P></P><P>I have a couple of Pix firewalls that send</P><P>ACL logs to Linux syslog server with "logging</P><P>trap 6" in the configuration.</P><P></P><P></P></BODY></HTML> Wed, 24 Sep 2008 18:35:00 GMT cisco24x7 2008-09-24T18:35:00Z ASA access list's logging https://community.cisco.com/t5/network-security/asa-access-list-s-logging/m-p/1042382#M896009 <P>Hi,</P><P> </P><P>I have ASA firewalls from which I need logs collected from few ACL rules. </P><P></P><P>logging enable</P><P>logging timestamp</P><P>logging console errors</P><P>logging buffered notifications</P><P>logging trap informational</P><P>logging asdm informational</P><P>logging facility 22</P><P>logging host inside 10.1.23.22</P><P></P><P>access-list access_out extended permit ip any any log debugging interval 300</P><P></P><P>I have this logging configuration and the a access rule to log all connections. But I dont get any logs from this access list rule or this access list. The only log I get is Built/Teardown log and some system notifications. </P><P></P><P>What is missing here, I want to get "access-list" log for connections hitting this ACL rule. </P><P></P><P>Thanks..</P><P></P> Mon, 11 Mar 2019 13:48:18 GMT https://community.cisco.com/t5/network-security/asa-access-list-s-logging/m-p/1042382#M896009 innetsecwork 2019-03-11T13:48:18Z Re: ASA access list's logging https://community.cisco.com/t5/network-security/asa-access-list-s-logging/m-p/1042383#M896010 <HTML><HEAD></HEAD><BODY><P>In your ACL, you set the log level to debugging...</P><P></P><P>Your ASA is not configure to log any message of that level. Let's say you want to send the log in the buffer, you would need to configure:</P><P></P><P>logging buffered debugging</P><P></P></BODY></HTML> Wed, 24 Sep 2008 12:04:28 GMT https://community.cisco.com/t5/network-security/asa-access-list-s-logging/m-p/1042383#M896010 dominic.caron 2008-09-24T12:04:28Z Re: ASA access list's logging https://community.cisco.com/t5/network-security/asa-access-list-s-logging/m-p/1042384#M896011 <HTML><HEAD></HEAD><BODY><P>Hi, </P><P>Thanks for the reply. </P><P>The ACL is set to debug level, and I am looking for logs to come on the syslog server, not just in the buffer. </P><P>So I am not sure what else I need to add in it.</P><P></P><P>Thanks...</P><P> </P></BODY></HTML> Wed, 24 Sep 2008 13:30:35 GMT https://community.cisco.com/t5/network-security/asa-access-list-s-logging/m-p/1042384#M896011 innetsecwork 2008-09-24T13:30:35Z Re: ASA access list's logging https://community.cisco.com/t5/network-security/asa-access-list-s-logging/m-p/1042385#M896012 <HTML><HEAD></HEAD><BODY><P>Put in :</P><P></P><P></P><P>logg trap 7</P><P></P><P></P><P>Should work then.</P><P>Do rate helpful posts.</P><P></P><P>Regards,</P><P>Sushil</P></BODY></HTML> Wed, 24 Sep 2008 18:10:54 GMT https://community.cisco.com/t5/network-security/asa-access-list-s-logging/m-p/1042385#M896012 suschoud 2008-09-24T18:10:54Z Re: ASA access list's logging https://community.cisco.com/t5/network-security/asa-access-list-s-logging/m-p/1042386#M896013 <HTML><HEAD></HEAD><BODY><P>Why do you need "logging trap 7"? I thought</P><P>"logging trap 6" will send ACL log to the syslog</P><P>server. </P><P></P><P>I have a couple of Pix firewalls that send</P><P>ACL logs to Linux syslog server with "logging</P><P>trap 6" in the configuration.</P><P></P><P></P></BODY></HTML> Wed, 24 Sep 2008 18:35:00 GMT https://community.cisco.com/t5/network-security/asa-access-list-s-logging/m-p/1042386#M896013 cisco24x7 2008-09-24T18:35:00Z