Hi all,
I would like to track the ACL entries in the log and therefore I created an ACL with the LOG keyword like that:
ip access-list extended ICMP
permit icmp any any log
permit ip any any
Now my goal is not to have the LOG entries in the local buffered LOG, but in the logging persistent.
I configured the following logging discriminator:
logging discriminator ACL severity drops 6 msg-body drops IPACCESSLOG
logging buffered discriminator ACL
logging persistent size 200000 filesize 200000
logging rate-limit console all 100
The good part is that the ACL LOG entries are not seen in the local buffered logging, but also not in the persistent logging.
Does that count as buffered logging as well and therefore will the messages not appear in the persistent logging?
Any idea how I could have the ACL log entries in the persistent logging, but not in the buffered one?
Regards,
Marius.
