syslog output not going to asa

[mialbert]

    I have an asa5510 on 8.2.2.  I have my

logging configuration as below

logging enable
logging timestamp
logging buffer-size 300000
logging buffered debugging
logging trap informational
logging history errors
logging asdm informational
logging host inside <host address>

I am not getting any syslog output to the syslog server.  I'm using kiwi syslog server latest version.  Have tried disabling/reenabling logging and changing inside host destinations.  Is there another command needed

[mvsheik123]

Hi,

The commands related to 'syslog' are correct. Does ASA able to reach syslog server inside?

Thx

MS

[mialbert]

Yes it is.  It is not on the same subnet as the asa inside interface but it is on a subnet that it reachable by the asa and it can ping the syslog server.

[jyothydas]

Make sure syslog service is on, routing is correct.

And thats a big buffer size right?

[brquinn]

You can verify that the ASA is sending syslogs with a packet capture.

Ex:

capture incap interface inside match udp any host eq 514

show capture incap

Thanks,

Brendan