08-06-2011 01:40 AM - edited 03-11-2019 02:08 PM
Dear boss
I want to see log for write on ASA5520. who & when write lastly and who write before.
How to see this log. In show vershon i see last modified date, but not log.
Thaning You
shahid
08-06-2011 04:58 AM
You'll need to setup a AAA server and check it's logs. AFAIK the ASA cannot do it directly.
08-06-2011 05:39 AM
hi clark
In show version wee see when last modified but not saved/write.
How to see last saved/write date?
My AAA server is enable but dont see log.
Please tell me details how to enable or check.
thanks.
08-06-2011 06:14 AM
In your AAA server filter on the ASA and do a search for 'write' or 'copy' and that should bring up the results you are looking for.
08-06-2011 06:32 AM
Hi Shahid,
You can use this log to identify who did a write mem on the device, the syslog id is 111001.
For this the level of logging should be debug.
Error Message %ASA-5-111001: Begin configuration: IP_address writing to device
Explanation This message is displayed when you enter the write command to store your configuration on a device (either floppy, flash memory, TFTP, the failover standby unit, or the console terminal). The IP_address indicates whether the login was made at the console port or with a Telnet connection.
I hope this is what you were looking for.
Hope this helps.
Thanks,
Varun
08-11-2011 09:09 AM
Any luck on this??
-Varun
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide