Output modifiers on FWSM logs

[Colin Higgins]

I am trying to search through some extensive FWSM logs from a SSH session for a specific IP address

What kind of output modifiers can I use to include or exclude IP addresses when viewing the log?

I am trying show logg I i 172.20.1.5

but it won't take it.

[Julio Carvajal · Accepted solution]

Hello Colin,

what about

logging enable

logging buffer 7

Show logging | include 172.20.1.5

You should see something, if that is not showing there well that could mean the FWSM is not seeing the traffic at all

We can do a capture to confirm the traffic is getting into the FWSM,

Regards,

Julio

CSC it's a free support community take your time to rate all the engineer's responses that help you resolving your problems.

[Ramraj Sivagnanam Sivajanam · Accepted solution]

just to add on to Julio's comments, please do ensure the logging buffer-size is big e.g. 10000