ASA url logging

[scottwilliamson]

Hi,

I'm attempting to make our ASA log urls and I am getting some success. However, the output presents the IP instead of the actual domain, e.g, when browsing to imdb it is logged as:

Nov 16 2009 14:12:35: %ASA-5-304001: 30.30.30.30 Accessed URL 209.85.229.148:/ad

j/imdb2.consumer.homepage/;tile=2;sz=468x60,728x90,1008x150,9x1;p=t;s=32;;ord=99

73051011677648

rather than imdb.com/....(or whatever it happens to be).

How do I get the ASA to log the domain rather than the corresponding IP address?

http://www.cisco.com/en/US/products/ps6128/products_configuration_example09186a0080ac2fda.shtml#related

states the ASA has to run vers 8.0.4.24 or later, ours has 8.2(1).

Thanks,

Scott

[scottwilliamson]

Hi All,

I finally got around to trying this again and I can confirm that with v8.2(3) and using the regex config from Roderick above my ASA is now logging what appears to be the full urls of sites. I didn't have to do anything with DNS either.

Thanks for everyone's input.

Regards,

Scott

[tstrosnider]

You do not need the regex, you can use the following command logging message 304001