Missing connection logs

[Otvforte]

Hello,

I've successfully configured an external syslog server on FDM, and it's receiving messages correctly. I've set the Default Action Block to send syslog messages, and those are arriving as expected on the external server (among other messages).

However, I’ve also configured an Access Control Entry (ACE) that allows internet access (from inside to outside) with logging enabled, but I’m not seeing any syslog messages related to that rule. It seems like the logs are either not being generated or not being sent.

For instance, I can see these logs under Events > Connections in the FDM interface, but they are not appearing on the external syslog server.

Could you help me understand what might be missing or misconfigured?

ACE that is generating connection logs (missing):

Syslog server settings:

Thank you,

[MHM Cisco World]

> show running logging 

Share this 

MHM

[Otvforte]

Here you are,

show running-config logging
logging enable
logging timestamp
logging console informational
logging buffered informational
logging trap informational
logging host inside 192.168.0.2
logging permit-hostdown

[MHM Cisco World]

It OK' is server connect to inside interface? 

MHM

[Otvforte]

Yes, and its also already receiving some logs from FDM, but missing connections logs.

[MHM Cisco World]

What is action you use trust ? (I can not see it clearly)

If yes then change it to allow 

Trust normally not generate log 

MHM

[Otvforte]

Tried with action 'Allow', same results. Most of the syslogs are like this bellow and don't show the URL, which is what i'm looking for

Again, on Events / Connection, logs are fine

[MHM Cisco World]

> show conn 
then 
>clear conn <IP>

note:- use Allow not trust as action 

MHM

[Otvforte]

Hi, 

I couldn't understand how this command can be related with the logs issue.

Thank you,

[MHM Cisco World]

if the FTD have Conn then it not pass traffic via ACP and hence you can not get Log 
clear Conn so the connection start hit ACP

MHM