cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


51
Views
0
Helpful
1
Replies
Beginner

Baseline syslog message elevation on Cisco ASA.

I was wondering if anyone has a baseline syslog message configuration. I know how to setup syslog and understand the logging levels, but I am looking to capture mostly warnings with some informational messages being elevated to warning status (example: a user connecting to the VPN).  Does anyone have a good list of messages that they deem as important enough to elevate for capturing by a syslog server?

1 REPLY 1
Highlighted
Hall of Fame Guru

That's what I do also -

That's what I do also - logging trap warnings. I set the local logging to informational for more visibility.

I elevate the VPN user logins to warning level.

I also have elevated the change of a tracked route in instances where I am using ip sla operation to change the default route in the event of loss of the primary ISP. i.e.:

logging message 622001 level warnings