cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1829
Views
0
Helpful
2
Replies

Sending ASA logs to Multiple Syslog Servers with different Severity levels

Hi,

I have ASA 5555-X running IOS Version 9.12(3)12. I have 2 Syslog servers. I want to send debug messages to one of the servers but only specific messages to the second server as it has limited capacity. Does anyone have an idea on how should i filter logs sent to the second server?

 

Regards,

Stanslaus.

1 Accepted Solution

Accepted Solutions

balaji.bandi
VIP Guru VIP Guru
VIP Guru

I do not believe or know that ASA can have this capabilites. 

 

i would suggest below method :

 

1. send Logs to both the syslog server.

2. Filter on syslog server - what Logs required to capture rest ignore.

 

If i understand the requirement correctly, if you want to input logs to other side which you do not like to send all the logs .

 

then other method, you can filter the Logs in your syslog server, let your  syslog server send to other server only rquired logs.

 

make sense ?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

View solution in original post

2 Replies 2

balaji.bandi
VIP Guru VIP Guru
VIP Guru

I do not believe or know that ASA can have this capabilites. 

 

i would suggest below method :

 

1. send Logs to both the syslog server.

2. Filter on syslog server - what Logs required to capture rest ignore.

 

If i understand the requirement correctly, if you want to input logs to other side which you do not like to send all the logs .

 

then other method, you can filter the Logs in your syslog server, let your  syslog server send to other server only rquired logs.

 

make sense ?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hi Balaji,

I understand your solution. The problem is that the Syslog server that receives all logs is managed by another operating company and does not talk to the one that is supposed to receive few logs. That is why i thought is could have been easier to filter logs to send to the servers on the ASA.

 

Regards,

Stanslaus.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers