log one rule

[ohassairi]

when configuring syslog in one PIX firewall, is it possible to send to syslog server only messages related to one access rule?

i don't want to filter by sevirity but by access rule.

thanks

[1cmerchant]

In theory I guess you could turn up the logging severity by using a command like 'logging trap emergency' which would then log only the most severe syslog events. Then in the access-list put 'log' at the end of every line and that should get close to what you described.