cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1744
Views
0
Helpful
1
Replies

Splitting syslog between servers on ASA

tahscolony
Level 1
Level 1

Is it possible to configure logging in a way that the majority you want to see on one server can be blocked to another server so that only specific syslog messages can be sent to server 2?  I have a bunch of no logging messages set up to be sent to an existing server, and on another server, just want to send 111010 and similar to only trigger config events.  Hard to weed through the tons of events being sent by the ASA to just find the one that is sent.

1 Reply 1

balaji.bandi
Hall of Fame
Hall of Fame

Look at the below reference :

 

https://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/63884-config-asa-00.html#anc6

 

Other way what i have done for one of the customer ;

 

we send all the Logs to both syslog server, manage script to sort what we need for that servers for reporting.

rest will be remove from the log server.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Review Cisco Networking for a $25 gift card