what sort of abnormal behaviour do you mean?
Do you mean ASA interface failure, software error, any error that can generate a syslog message? If yes, then you can configure syslog messages and get the syslog sends to email.
Here is the configuration for your reference:
It is available since the first release of the ASA (version 7.0):
I meaning abnormal behaviour is any firewall found attack action, and send alert to administrator right now.
That document about send syslog to mail , I had see this morning , but I have some question.
1.Can set up some kinds syslog send to email and dome kinds syslog not send to email??
2.How to define what syslog send out when it happen??
P.S. my english is not good enough, if any word or sentence wrong , please tell me.
Thanks a lot !