Cisco 500 Series, Configuration Manual

Page: 955 / 1140

42-19
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 42 Monitoring the Security Appliance
Configuring and Managing Logs
The preceding example states that system log messages that match the criteria specified will be sent to
the output destination. The specified criteria for system log messages to be included in the list are the
following:
• System log message IDs that fall in the range of 104024 to 105999
•
All system log messages with critical level or higher (emergency, alert, or critical)
• All ha class system log messages with warning level or higher (emergency, alert, critical, error, or
warning)
A system log message is logged if it satisfies any of these conditions. If a system log message satisfies
more than one of the conditions, the message is logged only once.
Customizing the Log Configuration
This section describes other options for fine tuning the logging configuration and includes the following
topics:
•
Configuring the Logging Queue, page 42-19
• Including the Date and Time in System Log Messages, page 42-20
•
Including the Device ID in System Log Messages, page 42-20
• Generating System Log Messages in EMBLEM Format, page 42-21
•
Disabling a System Log Message, page 42-21
• Changing the Severity Level of a System Log Message, page 42-22
•
Changing the Amount of Internal Flash Memory Available for Logs, page 42-23
Configuring the Logging Queue
The adaptive security appliance has a fixed number of blocks in memory that can be allocated for
buffering system log messages while they are waiting to be sent to the configured output destination. The
number of blocks required depends on the length of the system log message queue and the number of
syslog servers specified.
To specify the number of system log messages that the adaptive security appliance can hold in its queue
before sending them to the configured output destination, enter the following command:
hostname(config)# logging queue message_count
Where the message_count variable specifies the number of system log messages that can remain in the
system log message queue while awaiting processing. The default is 512 system log messages. A setting
of 0 (zero) indicates unlimited system log messages, that is, the queue size is limited only by block
memory availability.
To view the queue and queue statistics, enter the following command:
hostname(config)# show logging queue