03-29-2011 07:55 AM - edited 02-21-2020 04:17 AM
Hi Guys
Is it possible and if so, can you tell me how to log command entered by a user to go to a syslog server. Similarily to the archive command on ISO.
Thanks in advance
Noel
04-06-2011 04:41 AM
Hi,
We can use the following commands. Syslog message 111009 displays which commands are executed.
http://www.cisco.com/en/US/partner/docs/security/asa/asa80/system/message/logsevp.html#wp1004080
logging enable
logging list cmds message 111009
logging trap cmds
logging host inside x.x.x.x
You can replace 'inside' with the name of interface where syslog server x.x.x.x resides.
Paps
01-26-2013 07:24 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide