logging device-id ipaddress

[mahesh18]

Hi everyone,

If we config ASA with command below

logging host inside 192.168.1.50

Above command will send all log messages to server 192.168.1.50 right?

If we also config command below

logging device-id ipaddress inside

What does above command do?

will it make any difference to logging to server?

Regards

MAhesh

[Marius Gunnerud · Accepted solution]

Hi Mahesh,

The device-ide keyword is used to include a device ID in a non-EMBLEM format syslog message.  EMBLEM is a format that is primarily used with CiscoWorks and is only available for UDP syslog servers.

logging device-id ipaddress inside

This command will send syslog messages to the configured syslog server with the IP address of the inside interface as the device ID.  This will not affect to the syslog server you are sending logs to, just what device ID it sends.  Keep in mind that this device id will override any interface IP you are sourcing the syslog message from. 

So lets say you configure logging host DMZ 192.168.1.50  and then you configure logging device-id ipaddress inside  All syslog messages will be sent to 192.168.1.50 but will show up with an ID (or source ID) of the inside interface IP.

You can also configure the device id to be the hostname of the ASA, a context name, or a custom string that you define yourself.

--
Please remember to rate and select a correct answer

[mahesh18]

Thanks Marius

Mahesh

[farazchakkungal]

Can we configure different device-id for different syslog server on the same ASA?