Is it possible to have dedicated setting to the new Syslog server only on Cisco ASA?

[huntlee]

Hi NetPro gurus,

I have a Cisco ASA 5520 with IOS 8.4.2.

The ASA is currently sending syslogs to an existing production Syslog server (10.1.1.1).  I have a requirement from customer to setup an additional Syslog server (192.168.1.1) with the following requirement:

1. An event list with a Message ID Filter of 111008 (for full accountability)
2. Have the facilty code to include in Syslog to LOCAL7(23)
3. Have the logging level to Notification
4. Apply this newly created logging filter to this additional Syslog server (192.168.1.1)

Is it possible to have these settings applied to the new additional Syslog target (192.168.1.1), but not affecting nor changing the syslog settings to the current production Syslog (10.1.1.1)? As my customer does not want the settings changed for their existing syslog target.

Would appreciated if anyone can shed some light on this.

Cheers,

Hunt 

[rvarelac]

Unfortunately, that cannot be configured.

The syslogs sent will be the same to all syslog servers.

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/monitor.html

- Randy -

[huntlee]

Thanks for your response rvarelac   :)

Is there any workaround available?

Hunt

[rvarelac]

Hi , 

With the Current IOS available unfortunately no. 

We will have to wait for an upgrade on the ASA to have this feature enable .

Have a nice day !