cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1029
Views
0
Helpful
1
Replies

Access logs issue for long time session

Laloutre
Level 1
Level 1

Hi,
I noticed that in my access logs, some entries have a very high value in the "time-taken" field (several days or weeks). That means I only see the logs concerning these connections after a very long time as log entries is written when session is closed and this situation may present a security issue.
Is there a way to add in the access log entries for a session that is not closed yet or can I forcefully terminate all session regularly to force a log entry ?

Thanks for your help.

1 Reply 1

Libin Varghese
Cisco Employee
Cisco Employee

Hi,

 

Could you share the name and type of logs you are referring to on the ESA?

 

I don't remember seeing access logs on the ESA and all available logs on the ESA should update dynamically as the connection is created with the ESA.

 

Regards,

Libin Varghese