topic syslog in Network Security

syslog

TECH-JEFF — Fri, 21 Feb 2020 13:25:56 GMT

Hi, just want to ask if I did the right command. I would like to set the logging of our router's logs into a syslog server which has a Windows operating system. I used the command "logging ip or hostname"

Next is I'm not sure if logging is pushing thru. BTW, I'm using Splunk for the log server.

Thanks

Jeff

We normally specify the

Marvin Rhoads — Tue, 24 Mar 2015 12:25:40 GMT

We normally specify the logging server IP address but you may use the hostname if you really want. It's a waste of device resources to resolve the hostname every time It needs to send a log event.

You can do a quick packet capture on your server filtering on the source IP address of your device and looking for the UDP port 514 packets to see them arriving.

Please validate if you have

Tushar Bangia — Thu, 26 Mar 2015 04:12:31 GMT

Please validate if you have 'logging trap' configured, also you can refer below link for same:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/monitor_syslog.html

Alternatively, please share the logging configs for ASA. We will review it for you.

Regards,

Tushar Bangia

Note - Please do rate the post if you find it helpful!!