42-14
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 42 Monitoring the Security Appliance
Configuring and Managing Logs
Changing the Log Buffer Size
By default, the log buffer size is 4 KB. To change the size of the log buffer, enter the following command:
hostname(config)#
logging buffer-size
bytes
Where the
bytes
argument sets the amount of memory used for the log buffer, in bytes. For example, if
you specify 8192, the adaptive security appliance uses 8 KB of memory for the log buffer.
The following example specifies that the adaptive security appliance uses 16 KB of memory for the log
buffer:
hostname(config)#
logging buffer-size 16384
Automatically Saving the Full Log Buffer to Flash Memory
Unless configured otherwise, the adaptive security appliance address messages to the log buffer on a
continuing basis, overwriting old messages when the buffer is full. If you want to keep a history of logs,
you can configure the adaptive security appliance to send the buffer contents to another output location
each time the buffer fills. Buffer contents can be saved either to internal Flash memory or to an FTP
server.
When saving the buffer content to another location, the adaptive security appliance creates log files with
names that use a default time-stamp format, as follows:
LOG-YYYY-MM-DD-HHMMSS.TXT
where
YYYY
is the year,
MM
is the month,
DD
is the day of the month, and
HHMMSS
is the time in hours,
minutes, and seconds.
While the adaptive security appliance writes the log buffer contents to internal Flash memory or an FTP
server, the adaptive security appliance continues saving new messages to the log buffer.
To specify that messages in the log buffer should be saved to internal Flash memory each time the buffer
wraps, enter the following command:
hostname(config)#
logging flash-bufferwrap
Automatically Saving the Full Log Buffer to an FTP Server
See the
“Saving the Current Contents of the Log Buffer to Internal Flash Memory”
section for more
information about saving the buffer.
To specify that messages in the log buffer should be saved to an FTP server each time the buffer wraps,
perform the following steps.
Step 1
To enable the adaptive security appliance to send the log buffer contents to an FTP server every time the
buffer wraps, enter the following command:
hostname(config)#
logging ftp-bufferwrap
Step 2
To identify the FTP server, entering the following command:
hostname(config)#
logging ftp-server
server path username password
Where the
server
argument specifies the IP address of the external FTP server
Summary of Contents for 500 Series
Page 38: ...Contents xxxviii Cisco Security Appliance Command Line Configuration Guide OL 12172 03 ...
Page 45: ...P A R T 1 Getting Started and General Information ...
Page 46: ......
Page 277: ...P A R T 2 Configuring the Firewall ...
Page 278: ......
Page 561: ...P A R T 3 Configuring VPN ...
Page 562: ......
Page 891: ...P A R T 4 System Administration ...
Page 892: ......
Page 975: ...P A R T 5 Reference ...
Page 976: ......