ASA 5520 Logs in RealTime Viewer Delayed

[robert.horrigan]

Hello,

I have a newish instance of 5520 running.  I am seeing some odd logging issues in that the logs are significantly delayed showing up in the real time viewer.  I'll try to connect, say on remote desktop, and will not see the traffic in the viewer for up to 20 seconds or so after I'm already connected to the server.  I have not seen this before.  Has anyone else run into this and know if there is a fix?  Appreciate any feedback.

/r

Rob

[varrao]

Hi Robert,

Have you enabled the log option after that acl, if yes, than use the following option after the acl,

access-list out_in permit ip any any log interval 1

and then check again, some delay is expected because, in case of the ASDM log viewer, the java application fetches the data from the ASA,but in a syslog server the ASA sends the data to the syslog.

Hope this helps

Thanks,

Varun