How to see write log

[shahid_duet]

Dear boss

I want to see log for write on ASA5520. who & when write lastly and who write before.

How to see this log. In show vershon i see last modified date, but not log.

Thaning You

shahid   

[Collin Clark]

You'll need to setup a AAA server and check it's logs. AFAIK the ASA cannot do it directly.

[shahid_duet]

hi clark

In show version wee see when last modified but not saved/write.

How to see last saved/write date?

My AAA server is enable but dont see log.

Please tell me details how to enable or check.

thanks.

[Collin Clark]

In your AAA server filter on the ASA and do a search for 'write' or 'copy' and that should bring up the results you are looking for.

[varrao]

Hi Shahid,

You can use this log to identify who did a write mem on the device, the syslog id is 111001.

For this the level of logging should be debug.

Error Message    %ASA-5-111001: Begin configuration: IP_address writing to device

Explanation    This message is displayed when you enter the write command to store your  configuration on a device (either floppy, flash memory, TFTP, the failover standby unit, or the  console terminal). The IP_address indicates whether the login was made at the console port or with  a Telnet connection.

I hope this is what you were looking for.

Hope this helps.

Thanks,

Varun

[varrao]

Any luck on this??

-Varun