Cisco 500 Series, Configuration Manual

Page: 941 / 1140

42-5
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 42 Monitoring the Security Appliance
Configuring and Managing Logs
The following example sets the adaptive security appliance to receive requests from host 192.168.3.2 on
the inside interface:
hostname(config)# snmp-server host 192.168.3.2
hostname(config)#
snmp-server location building 42
hostname(config)# snmp-server contact Pat lee
hostname(config)# snmp-server community ohwhatakeyisthee
Configuring and Managing Logs
This section describes the logging functionality and configuration, as well as the system log message
format, options, and variables. It includes the following topics:
•
Logging Overview, page 42-5
• Logging in Multiple Context Mode, page 42-5
•
Enabling and Disabling Logging, page 42-6
• Configuring Log Output Destinations, page 42-7
•
Filtering System Log Messages, page 42-15
• Customizing the Log Configuration, page 42-19
•
Understanding System Log Messages, page 42-24
Logging Overview
The adaptive security appliance system logs provide you with information for monitoring and
troubleshooting the adaptive security appliance. With the logging feature, you can do the following:
•
Specify which system log messages should be logged.
• Disable or change the severity level of a system log message.
•
Specify one or more locations where system log messages should be sent, including an internal
buffer, one or more syslog servers, ASDM, an SNMP management station, specified e-mail
addresses, or to Telnet and SSH sessions.
• Configure and manage system log messages in groups, such as by severity level or class of message.
•
Specify what happens to the contents of the internal buffer when the buffer becomes full: overwrite
the buffer, send the buffer contents to an FTP server, or save the contents to internal Flash memory.
You can choose to send all system log messages, or subsets of system log messages, to any or all output
locations. You can filter system log messages by locations, by the severity of the system log message,
the class of the system log message, or by creating a custom system log message list.
Logging in Multiple Context Mode
Each security context includes its own logging configuration and generates its own messages. If you log
in to the system or admin context, and then change to another context, messages you view in your session
are only those that are related to the current context.
System log messages that are generated in the system execution space, including failover messages, are
viewed in the admin context along with messages generated in the admin context. You cannot configure
logging or view any logging information in the system execution space.