Cisco 500 Series, Configuration Manual

Page: 951 / 1140

42-15
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 42 Monitoring the Security Appliance
Configuring and Managing Logs
The path argument specifies the directory path on the FTP server where the log buffer data is to be saved.
This path is relative to the FTP root directory.
The username argument specifies a username that is valid for logging into the FTP server.
The password argument specifies the password for the username specified.
For example:
hostname(config)# logging ftp-server 10.1.1.1 /syslogs logsupervisor 1luvMy10gs
Saving the Current Contents of the Log Buffer to Internal Flash Memory
At any time, you can save the contents of the buffer to internal Flash memory. To save the current
contents of the log buffer to internal Flash memory, enter the following command:
hostname(config)# logging savelog [ savefile ]
For example, the following example saves the contents of the log buffer to internal Flash memory using
the file name latest-logfile.txt:
hostname(config)# logging savelog latest-logfile.txt
Clearing the Contents of the Log Buffer
To erase the contents of the log buffer, enter the following command:
hostname(config)# clear logging buffer
Filtering System Log Messages
This section describes how to specify which system log messages should go to output destinations, and
includes the following topics:
• Message Filtering Overview, page 42-15
•
Filtering System Log Messages by Class, page 42-16
• Filtering System Log Messages with Custom Message Lists, page 42-18
Message Filtering Overview
You can filter generated system log messages so that only certain system log messages are sent to a
particular output destination. For example, you could configure the adaptive security appliance to send
all system log messages to one output destination and to send a subset of those system log messages to
a different output destination.
Specifically, you can configure the adaptive security appliance so that system log messages are directed
to an output destination according to the following criteria:
•
System log message ID number
•
System log message severity level
•
System log message class (equivalent to a functional area of the adaptive security appliance)