We enabled logging on a Firepower 4100 with ASA software but I would like to only log hits on inbound rules. Outbound rules are not interesting in my case because this traffic is logged on other firewalls. This way we receive close to 300GB of logs per day.
According to the CLI guide I can add the option "log disable" to the end of the ACE to suppress logging for this rule.
Sadly this option only seems to work for the explicit "deny any any" rule ate the end, the permit tcp rules are still logged on the syslog server as a ASA-6-302013/ASA-6-302014 syslog message.
The CLI guide very clearly states "log disable - Disables all ACE logging".
Can anyone explain this to me?
ps. I know I can disable 302013/302014 but this way I would also suppress inbound ACL messages.
