09-12-2017 02:28 PM - edited 03-08-2019 12:00 PM
My log buffer is 300000 bytes and would like to know a good configuration so I can see logs from previous days (at least a week ago) however the problem is there is a lot of log events due to denied ACL hits. Anyone have a good reccomendation?
09-12-2017 02:46 PM - edited 09-12-2017 02:59 PM
Hi
Unfortunately I think that is not possible unless you have a Syslog server or a Cisco ACS where the events are stored.
09-13-2017 12:36 PM
09-12-2017 03:05 PM
You'll need a seperate syslog server to do this.
09-13-2017 12:34 PM
09-13-2017 12:43 PM
Hi,
That info could be seen through the logging commands, also I always suggest configure the following commands on the devices to know who is configuring and what:
archive
log config
logging enable
logging size 300
notify syslog contenttype plaintext
hidekeys
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide