10-18-2023 04:00 AM
Hello,
On my ASA, I see the logs from ASDM, in notification mode, but I only see the accesses appearing in deny.
ACLs authorize all HTTP/HTTPS traffic to our proxy server. How can I see not only traffic incoming refused, but also everything that is authorized?
#sh run log
logging enable
logging timestamp
no logging hide username
logging list FailErrors level errors class ha
logging asdm-buffer-size 500
logging trap notifications
logging asdm notifications
logging facility 21
From Real time Log viewer, I tried to change the Logging level to "informational", but it's the same
10-18-2023 04:08 AM
try below should work ( still not working - post ASA verison and show logging )
logging buffered informational
logging trap notifications
logging asdm informational
10-18-2023 04:10 AM - edited 10-19-2023 12:29 AM
I Send you message check it
10-18-2023 11:32 AM
Agree with @balaji.bandi 's post. The logging buffered informational and logging asdm informational should give you messages for each and every new tcp connection through the ASA to your server.
10-19-2023 12:25 AM
He mention that he use informational and still see same
10-19-2023 01:21 AM
Hello,
In fact, I had modified from asdm/real time log.
I made the modification from the cli by entering logging asdm informational, now I can see, the rest. I see buit and teardown.
Now I will try to interpret all of this. I was asked to check if I saw specific external IP arrived. but no, I don't see it using filters.
Thanks
10-19-2023 04:39 AM
Not sure i understand the comment, you mean to say now you see the Logs ?
ASDM is bit buggy some times.
i would click Filter and apply what required to work as expected some times.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide