cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
490
Views
0
Helpful
2
Replies

Logging Remote Access Connections to Syslog

Doopzzy
Level 1
Level 1

Hello, 

Currently having an issue logging event ID 722051 to my syslog server from FMC. This specific event shows connections to our RA VPN and details. By default, we log up to a level 4 but that does not cover this event which is a 6. 

I added this event as enabled in the syslog setting but am still not getting logs to server for this event. Please let me know if there is another route I need to go to log this event. 

Cisco Secure Firewall Threat Defense Syslog Messages - Syslog Messages 722001 to 776254 [Cisco Secure Firewall Management Center] - Cisco

2 Replies 2

nspasov
Cisco Employee
Cisco Employee

Can you share the CLI output from this command: show running-config logging

Thank you for rating helpful posts!

Thank you for rating helpful posts!

Marvin Rhoads
Hall of Fame
Hall of Fame

...and please share a screenshot of the platform settings where you enabled the change.

Review Cisco Networking for a $25 gift card