History logs for configuration file

[ryan.ocampo1]

Hello,

Would anyone know if there is a history logs that I can check for the configuration file?

To be specific, would like to check if when and who edited the IPSec VPN configuration on CIsco ASA.

Thank you in advance!

[balaji.bandi]

Cisco ASA , have you configured Syslog server, Cisco ASA itself can not store more logs in buffer, so they erase when the new logs are filled in buffer (this is again based on your config).

if not configured syslog, you wont be able to see anything,

[ryan.ocampo1]

Hello Balaji,

Thank you for your immediate response, referring on the screenshot below, It was enabled last year but with that configuration am I able to see the history logs? 

 

[balaji.bandi]

you have facility 20, check the logs  and facility to configure. ( do you see some logs on syslog server - and your syslog server not running standard port, make sure logs reach syslog server)

https://www.cisco.com/c/en/us/td/docs/security/asa/syslog/b_syslog/messages-listed-by-severity-level.html

[marce1000]

 - Check this thread : https://community.cisco.com/t5/network-security/audit-log-on-cisco-asa-firewall/td-p/3710864

 M.