ASA5510 logs automatically to flash/USB

[Alar Pandis]

Hi! I wonder is possible that all (selected) logs is automatically saved to external flash or USB device? I mean, same as syslog sent to another server/machine.

More thanks, Alar.

[Collin Clark]

I don't think there is a way to copy them all to flash. Here's the config guide on writing to flash when the buffer is full, but it will only be copied when it is full. The minim size is 4096, so you will always miss some events.

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/l2.html#wp1750561

[BrinksArgentina]

Yes, you can send events to a remote syslog server.

For example: http://www.kiwisyslog.com/kiwi-syslog-server-overview/

You can find detailed info here:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/monitor.html

snmp-server host DMZ snmp-server poll community Public

snmp-server enable traps snmp authentication linkup linkdown coldstart

snmp-server enable traps syslog

! logging trap {severity_level | message_list}

Guido

Please rate all the helpful comments. Thanks!

[Alar Pandis]

Hi and thanks!

Well, yes, to remote server, but I meant, when I do have ... flash 2 giga or more or USB even with more space I (ASA 5510) can automatically save all logs there.

More thanks, Alar.