cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1162
Views
0
Helpful
3
Replies

ASA 5545X Logging Error

TW80CJ5
Level 3
Level 3

Hello Everyone,

I am getting a logging error 414002 in my ASA. I see that disk0:/syslog is full of files on some of my ASA's and some have zero files int the disk0:/syslog. Here are the error message(s) I am getting. They are similar, but just a little different with both have the 414002 error:

"Failed to save logging buffer to flash:/syslog directory using file name: filename: xxxxx: [Isufficient space, buffer size: 16384 bytes, requires additional 1734983680 bytes]"

I currently have 4,572,041216 bytes available. There are no logs in the disk0:/syslog folder on the ASA

OR

"Failed to save logging buffer to flash:/syslog directory using file name: filename: xxxxx: [File creation error]"

I currently have 4,033,310,720 bytes available. There are A LOT of logs in the disk0:/syslog

Here is my logging config:

logging enable
logging timestamp
logging buffer-size 16384
logging buffered informational
logging trap informational
logging history informational
logging asdm informational
logging mail emergencies
logging from-address FIELDOFFICEASA@YAHOO.COM
logging recipient-address HELPDESKEMAIL@YAHOO.COM level emergencies
logging queue 1024
logging device-id hostname
logging host SYSLOG_SERVER 192.168.1.45 6/1514
logging flash-bufferwrap
logging flash-minimum-free 2000
logging flash-maximum-allocation 2000000
logging permit-hostdown
logging class auth history informational

 

 

I understand that's a lot of logging, but I have an IA department to keep happy and this amount of logging is required.


I know I can issue the no logging message 414002, but would like a better solution if possible. Thoughts, ideas, suggestions?

1 Accepted Solution

Accepted Solutions

TW80CJ5
Level 3
Level 3

After a discussion with IA, I was able to remove the following line:

no logging flash-bufferwrap

This resolved the issue and calmed down the alerts.

 

View solution in original post

3 Replies 3

balaji.bandi
Hall of Fame
Hall of Fame

i would suggest to store only required logs to flash, rest all send to Syslog server

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

BB....what config changes to I need to make?

TW80CJ5
Level 3
Level 3

After a discussion with IA, I was able to remove the following line:

no logging flash-bufferwrap

This resolved the issue and calmed down the alerts.

 

Review Cisco Networking products for a $25 gift card