Baseline syslog message elevation on Cisco ASA.

[jyoung]

I was wondering if anyone has a baseline syslog message configuration. I know how to setup syslog and understand the logging levels, but I am looking to capture mostly warnings with some informational messages being elevated to warning status (example: a user connecting to the VPN).  Does anyone have a good list of messages that they deem as important enough to elevate for capturing by a syslog server?

[Marvin Rhoads]

That's what I do also - logging trap warnings. I set the local logging to informational for more visibility.

I elevate the VPN user logins to warning level.

I also have elevated the change of a tracked route in instances where I am using ip sla operation to change the default route in the event of loss of the primary ISP. i.e.:

logging message 622001 level warnings